News

News

• December 13, 2018 13 Dec'18

  Operation Sharpshooter targets infrastructure around the world

  Operation Sharpshooter is a recently discovered global cyberattack campaign targeting critical infrastructure organizations, including nuclear, defense and financial companies.

• December 12, 2018 12 Dec'18

  Equifax breach report highlights multiple security failures

  An Equifax breach report, based on a government investigation, blamed the incident on multiple security failures and concluded the breach was preventable.

• December 11, 2018 11 Dec'18

  Second Google+ data exposure leads to earlier service shutdown

  Another Google Plus data exposure -- this time potentially affecting more than 52 million users -- will cause the service to be shut down four months earlier than scheduled.

• December 07, 2018 07 Dec'18

  Facebook app permissions skirted rules to gather call logs

  New email messages revealed that Facebook app permissions were carefully implemented to avoid alerting users to the fact that the Android app was gathering call log and SMS data.

• December 07, 2018 07 Dec'18

  Risk & Repeat: RSA Conference 2019 eyes diversity improvements

  This week's Risk & Repeat podcast looks at RSA Conference's diversity and inclusion initiatives and discusses what they mean for both the event and the infosec industry.

• December 06, 2018 06 Dec'18

  NRCC email breach confirmed eight months later

  A security company was brought in to investigate a National Republican Congressional Committee breach from April, but little is known about the NRCC email theft.

• December 06, 2018 06 Dec'18

  NSO Group's Pegasus spyware linked to Saudi journalist death

  Soon after the Pegasus spyware was linked to the death of a Mexican journalist, a new lawsuit alleged the NSO Group and its spyware were also linked to the death of a Saudi journalist.

• December 05, 2018 05 Dec'18

  Testing email security products: Results and analysis

  Kevin Tolly of the Tolly Group offers a look at how his company set out to test several email security products and the challenges it faced to come up with sound methodologies.

• December 05, 2018 05 Dec'18

  New VirusTotal hash causes drop in antivirus detection rates

  Questions were raised about how antivirus vendors use the VirusTotal database after a researcher highlighted a significant drop in malware detection rates following an upload of a new VirusTotal hash.

• November 30, 2018 30 Nov'18

  Are US hacker indictments more than Justice Theater?

  New hacker indictments and U.S.Treasury Department sanctions highlight the disconnect between government action and real world consequences for threat actors.

• November 30, 2018 30 Nov'18

  Mitre enters product testing with Mitre ATT&CK framework

  The first round of evaluations using the Mitre ATT&CK framework has gone public, putting on display how different endpoint products detect advanced threat activities.

• November 30, 2018 30 Nov'18

  RSA Conference launches diversity and inclusion initiative

  Following the criticism of the last conference, RSA Conference started a diversity and inclusion initiative that, among many other changes, eliminates all-male panels.

• November 30, 2018 30 Nov'18

  Marriott discloses Starwood data breach affecting 500 million guests

  Marriott International admitted to a Starwood data breach that began in 2014 and affects about 500 million customers. Experts are unsure about the GDPR implications.

• November 30, 2018 30 Nov'18

  Spectre v2 mitigation causes significant slowdown on Linux 4.20

  News roundup: A Spectre v2 mitigation causes significant performance slowdowns in Linux 4.20. Plus, Dell had to reset user passwords after a data breach, and more.

• November 30, 2018 30 Nov'18

  Risk & Repeat: DeepMasterPrints spells trouble for biometrics

  This week's Risk & Repeat podcast looks at the future of biometric authentication after researchers unveiled a new approach that uses neural networks to bypass fingerprint scanners.