News

News

• March 12, 2018 12 Mar'18

  Olympic Destroyer was a false flag cyberattack, research claims

  New research claims Olympic Destroyer was not the work of the North Korea-backed Lazarus Group; rather, it was a false flag cyberattack designed to mislead attribution efforts.

• March 09, 2018 09 Mar'18

  Tenable introduces Lumin cyber exposure platform

  Tenable.io Lumin enables organizations to gauge their 'cyber exposure' to vulnerabilities and allows them to compare remediation efforts against industry benchmark data.

• March 09, 2018 09 Mar'18

  OURSA takes on RSA Conference to highlight diversity

  News roundup: Our Security Advocates emerges amid criticism of RSA Conference's lack of female keynote speakers. Plus, a kill switch is discovered for the Memcrashed DDoS exploit, and more.

• March 09, 2018 09 Mar'18

  DHS cybersecurity audit scores below target security levels

  A DHS cybersecurity audit for FISMA compliance by the Office of Inspector General rated the agency below target levels in three of five areas of information security.

• March 08, 2018 08 Mar'18

  NSA tracking program watched foreign hackers in action

  Researchers discovered evidence of an NSA tracking program designed to watch nation-state hackers and gather information as attacks were in progress.

• March 07, 2018 07 Mar'18

  McAfee cloud security platform expands to Microsoft Azure

  In its first move following the acquisition of cloud access security broker Skyhigh Networks, McAfee extended its cloud security platform to Microsoft Azure customers.

• March 07, 2018 07 Mar'18

  Risk & Repeat: Trustico certificate drama a cause for concern

  In this week's Risk & Repeat podcast, SearchSecurity editors discuss how a controversial move by reseller Trustico led to 23,000 Symantec SSL certificates being revoked.

• March 06, 2018 06 Mar'18

  Terabit DDoS attack hits 1.7Tbps and experts expect higher

  Five days after a record breaking terabit DDoS attack, a new 1.7Tbps DDoS attack was detected taking advantage of improperly secured memcached servers to launch a reflection attack.

• March 06, 2018 06 Mar'18

  Equifax data breach affected 2.4 million more consumers

  The massive Equifax data breach affected even more people. The startling total is now 147.9 million U.S. consumers who had their information stolen by hackers.

• March 02, 2018 02 Mar'18

  Cellebrite claims it can unlock Apple devices, but questions remain

  News roundup: Cellebrite claims it can unlock Apple devices, according to a Forbes report. Plus, iCloud encryption keys will now be stored in China, and more.

• March 02, 2018 02 Mar'18

  23,000 Symantec certificates revoked following leak of private keys

  DigiCert revoked 23,000 Symantec SSL certificates amid a public spat between the company and former reseller partner Trustico, which claimed the certificates were 'compromised.'

• March 01, 2018 01 Mar'18

  Memcrashed DDoS amplification exploits memcached UDP port

  Memcrashed, a devastating new DDoS amplification attack that exploits UDP port 11211, is only possible when memcached servers are exposed to the public internet.

• February 28, 2018 28 Feb'18

  Visa reports EMV chip cards thwart fraud, but criminals adapting

  Visa points to a 70% drop in fraud due to EMV chip cards, as consumers and merchants adopt the new payment card technology. But criminals are shifting their own focus to adapt.

• February 27, 2018 27 Feb'18

  New SAML vulnerability enables abuse of single sign-on

  Duo Security discovered a new SAML flaw affecting several single sign-on vendors that allows attackers to fool SSO systems and log in as other users without their passwords.

• February 27, 2018 27 Feb'18

  Risk & Repeat: Is the cyberthreat landscape shifting to cryptomining?

  In this week's Risk & Repeat podcast, SearchSecurity editors discuss how new attacks, like cryptojacking, may be supplanting previous top cyberthreats, such as ransomware.