Phishing and drive-by downloads lead infection methods
The most common infection vectors are still email phishing and drive-by downloads according to the latest threat report from AI security specialist Cylance.
The report provides a real-world glimpse into major cyber threats that affected Cylance’s customer base in 2017. Along with industry trends and analysis, and data from thousands of government entities and organizations of all sizes across 160 countries that have adopted a prevention-first approach to security.
North Korean antivirus software uses decade old pirated scan engine
With a name like 'SiliVaccine' you could be forgiven it's something your doctor would give you if you were worried about turning into a clown. But in fact this is North Korea's home grown antivirus product.
Check Point Software has obtained and analyzed a rare copy of the software and discovered key components of its source code to be identical to a 10-year old copy of Trend Micro's AV software.
81 percent of organizations see an increase in cyber security challenges
A new study from IT solutions provider US Signal reveals that businesses are seeing a greater number of security challenges.
The survey of security experts from a cross-section of organizations also shows 40 percent of respondents experienced at least one security incident in the last year, and 13 percent didn't know if they had.
Amazon now offers a smart home security installation service
Earlier today, we revealed that Amazon is bumping up the price of a Prime subscription by 20 percent, but this is not the only news coming from the online giant. A newly discovered and little-advertised portal on the Amazon site finds the company offering smart home security installation services.
Ranging in price from $240 to $840, the Smart Home Services packages include the cost of both hardware and installation. In all, there are five packages to choose from, covering everything from simple smart lighting, to full-home security systems.
Long-lasting DDoS attacks make a comeback as numbers of attacks and targets rise
Long-lasting DDoS attacks made a return in the first quarter of 2018 with the longest attack seen lasting 297 hours (more than 12 days). The last time a longer attack than this occurred was at the end of 2015.
This is among the findings of Kaspersky Lab's latest DDoS intelligence report which reveals that in the first quarter of 2018, DDoS attacks were registered against targets in 79 countries.
Configuration vulnerability could leave SAP systems open to compromise
A vulnerability arising from the default installation of popular business management platform SAP could lead to a full compromise of the system say researchers.
SAP security and compliance specialist Onapsis has revealed the flaw which is found in SAP Netweaver and can be compromised by a remote unauthenticated attacker with only network access to the system.
Exploit emerges for Microsoft's problematic Meltdown patch for Windows 7 and Server 2008
For Microsoft, the patches it produced for the Meltdown chip vulnerability proved to be just about as problematic as the original issue, further reducing the security of systems. Following the emergence of an exploit for the Windows-maker's first patch, users are advised to hurry up and install the patch-for-a-patch that was later released.
Last month, Ulf Frisk from Sweden revealed that Microsoft's Meltdown patches were making things worse for Windows 7 and Windows Server 2008, making it possible to read and write kernel memory and gain total control over the system. Now code has been posted online that can be used to exploit the "Total Meltdown" vulnerability.
North Korean leaders abandon western social media
Chances are you're not currently friends with Kim Jong Un on Facebook. And it's not likely to happen any time soon according to researchers at Recorded Future who have been looking at the internet usage patterns of North Korea's leaders.
In July last year they found that the country's ruling elite were plugged into contemporary internet society, were technologically savvy, and had patterns of internet use that were very similar to users in the West.
Security flaw could allow hackers to create hotel master keys
Most hotel chains these days rely on some sort of electronic key card mechanism rather than more traditional locks.
Researchers at F-Secure have found that hotels worldwide are using an electronic lock system with a flaw that could be exploited by an attacker to gain access to any room in the building.
Endpoints still vulnerable despite advances in protection technology
Although endpoint security solutions have improved, a new survey of IT security professionals finds that three quarters believe their existing anti-malware solutions would be able to prevent no more than 70 percent of infections.
The study from anti-evasion specialist Minerva Labs shows nearly half of the respondents surveyed (48 percent) say that they have seen about the same number of malware infections than previous years while 32 percent claim to have seen an increase in infections.
90 percent of malware given unhelpful labels by AV tools
According to a new study, 90 percent of malicious files are given generic labels by AV tools, such as 'trojan.generic', providing limited guidance for successful remediation and leaving enterprises exposed to subsequent attacks resulting from compromised credentials.
The study by breach protection specialist Lastline analyzed tens of millions of samples that were for the most part scanned and released by other security solutions.
Online banking security improves but only a third are free of critical vulnerabilities
The percentage of critical vulnerabilities in online banking systems is falling, but two thirds still contain at least one critical vulnerability according to a new report.
Enterprise security specialist Positive Technologies has released its Financial Application Vulnerabilities Report, drawn from audits performed by the company.
Martin Lewis suing Facebook over fake ads
We reported just over a week ago that fake ads promoting cryptocurrency scams were using the names of leading UK business figures.
Now one of those whose names has been featured, consumer advice expert Martin Lewis, is suing Facebook for defamation over the use of his face and name.
Google's Project Zero reveals security flaw in Windows 10 S after Microsoft fails to fix it
Details of a security flaw in Windows 10 S have been revealed by Google's Project Zero after Microsoft failed to issue a patch within the 90-day disclosure deadline.
The "WLDP CLSID policy .NET COM Instantiation UMCI Bypass" vulnerability is described as being of medium severity, and it allows for the execution of arbitrary code on systems with Device Guard enabled.
Cybercrime revenues hit $1.5 trillion a year
We reported earlier this month on the ways in which cyber criminals spend their ill-gotten gains.
The company behind those findings, Bromium, has now released more details from its research, which exposes a huge cybercrime-based economy and the professionalization of cybercrime.
© 1998-2026 BetaNews, Inc. All Rights Reserved. Privacy Policy - Cookie Policy.