Sign up for our weekly newsletter!
REGISTER NOW
News & Views
Content posted in December 2018
4 Global Cybersecurity Threats for 2019
News Analysis  
12/31/2018   4 comments
As the calendar turns to 2018, ISF is urging members to watch out for four specific security issues: ransomware, legislation, IoT and supply chain.
5G Network Security Needs a Comprehensive Approach in 2019
News Analysis  
12/28/2018   15 comments
As the first 5G rollouts are anticipated to start in 2019, service providers need to take a more holistic and comprehensive approach to securing these new networks and the businesses and customers using them.
Healthcare Industry Still in Ransomware Crosshairs
Jeffrey Burt  
12/27/2018   16 comments
A report by Kaspersky researchers has found that healthcare organizations in the US and Canada are still at heightened risk of ransomware attacks.
Security Leaders Need to Heed the Harsh Security Lessons of 2018
News Analysis  
12/26/2018   4 comments
The sheer number of incidents from 2018 has put even more of the spotlight on enterprise security. Over the next 12 months, businesses need be on the lookout for email and stolen privileges schemes, nation-state attacks and increases in compliance legislation.
SOP Story: Why Protecting Web Browsers Remains a Security Cornerstone
Larry Loeb  
12/24/2018   22 comments
One of the oldest ways to protect content on the web is SOP. However, it's not always implemented in the same way on all browsers. This can complicate one of the main cornerstones of Internet security.
Huawei Routers Vulnerable to Simplified Credential Stuffing Attack
Larry Loeb  
12/21/2018   14 comments
Security researchers at NewSky have found a vulnerability in Huawei's HG routers that leave these devices open to a brute force attack. The company has been notified, but it's not clear what, if any fix, has been applied.
Justice Department Ties 2 Chinese Nationals to Notorious APT10 Group
News Analysis  
12/21/2018   6 comments
In another indictment aimed at China's cyberespionage infrastructure, the Justice Department has charged two Chinese nationals with belonging to the notorious APT10 group, which targeted industries in the US, Japan and other countries.
Cloud Backup: How It Can Protect Against Ransomware
Jeffrey Burt  
12/20/2018   1 comment
For enterprises anxious to avoid being extorted by attackers using ransomware, backing up data to the cloud is an option to consider, though it's not the answer for everyone.
Email Spam: Don't Be a Chump or a Jerk
Alan Zeichick  
12/20/2018   3 comments
For decades, spam emails have clogged up corporate email inboxes. However, there are some simple rules and guidelines IT pros, as well as marketers, can use to cut down on this, and make everyone more secure.
McAfee: IoT & Crypomining Malware Growth Exploded in Q3
News Analysis  
12/20/2018   6 comments
In its new quarterly threat report, McAfee Labs researchers found that malware targeting IoT devices, as well as cryptomining, continued to grow, specifically by taking advantage of lax security practices.
Jenkins Flaw Can Allow Attackers to Log In as Admins
Larry Loeb  
12/19/2018   4 comments
New research from CyberArk finds a critical flaw in Jenkins servers that can allow an attacker to log in as an administrator, which can lead to any number of compromises and malicious activity.
Many Enterprises Still Blind to Security Risk, Study Finds
Jeffrey Burt  
12/19/2018   1 comment
Even as organizations continue to get hit with cyber attacks, they're struggling to accurately measure the costs of such events to their operations, a report by Tenable and the Ponemon Institute found.
US Ballistic Missile Defense System Riddled With Security Flaws
News Analysis  
12/18/2018   1 comment
An Inspector General's report concerning the Defense Department's Ballistic Missile Defense System found numerous security flaws, including a lack of multi-factor authentication and classified information stored on removable drives.
Shamoon Malware Re-Emerges With Attacks in Italy, Middle East
News Analysis  
12/18/2018   Post a comment
Over the last week, several reports emerged that the Shamoon malware, which was last seen in 2016, has re-emerged with attacks in Italy and the Middle East. This version includes a destructive data file wiper.
Russian-Backed Sofacy Group Used New Cannon Trojan in Recent Attacks
Larry Loeb  
12/17/2018   Post a comment
Palo Alto Networks' Unit 42 has documented two months of attacks from the Sofacy group, which also goes by Fancy Bear and APT28. Researchers found the attackers deployed a new Trojan called Cannon.
SQLite Vulnerability Could Put Thousands of Apps at Risk
Larry Loeb  
12/17/2018   6 comments
A significant bug in SQLite could allow for remote code execution, leaks of memory and program crashes within thousands of apps, according to new research.
Spam Emails Bring Bomb Threats to US Businesses, Schools
News Analysis  
12/14/2018   1 comment
On Thursday, US businesses and schools began receiving a number of bomb threats that demanded Bitcoin as ransom. All these seem related to a series of spam emails.
Phishing Emails, Trojans Continued to Proliferate in Q3 Report
Larry Loeb  
12/14/2018   6 comments
Researchers at Comodo Cybersecurity found that phishing emails continued to proliferate in the third quarter of this year, with PayPal as a major target. Malware, such as Trojans, also remain a top security issue.
Cisco: 'Brute Force' Attacks Outweigh AI Threat
Security TV  
12/14/2018   2 comments
In a wide-ranging interview, Cisco security boss Gee Rittenhouse talks about how machine learning, AI, blockchain and other emerging technologies fit into the security landscape.
IoT Botnets Shifting to Exploit Vulnerabilities
Jeffrey Burt  
12/13/2018   1 comment
A report from NetScout's ASERT Team finds that IoT devices are vulnerable to exploits for long periods of time and can be attacked within minutes after coming online.
China Suspected of Massive Marriott Data Breach Report
News Analysis  
12/13/2018   1 comment
A New York Times report finds that investigators believe China-backed attackers pulled off the massive data breach at Marriott, exposing the records of 500 million guests. It's a continuation of the tensions between China and the US.
'Operation Sharpshooter': Lazarus Revived or False Flag Operation?
News Analysis  
12/12/2018   Post a comment
McAfee Labs has homed in on a new attack targeting critical infrastructure that they call 'Operation Sharpshooter.' However, while there is technical overlap with the Lazarus Group, there's also the possibility of a false flag operation.
'Novidade' Exploit Changes DNS Settings in Home & Small Business Routers
Larry Loeb  
12/12/2018   Post a comment
Trend Micro has picked up on a new exploit dubbed 'Novidade,' which targets small business and home routers and changes their DNS settings to redirect the traffic as part of an attack.
Supermicro: Report Clears Company of Hacking Allegations
News Analysis  
12/12/2018   Post a comment
Following a Bloomberg report that found hackers implanted specialized chips in its motherboards, Supermicro claims an audit has cleared the company of wrongdoing.
ESET Researchers Find 12 New Linux Malware Families
Larry Loeb  
12/11/2018   Post a comment
A report from ESET finds 12 new Linux backdoor malware families in the wild that had previously been undocumented.
M2M Protocols Expose IoT Data, Trend Micro Finds
Jeffrey Burt  
12/11/2018   Post a comment
The MQTT and CoAP protocols that are crucial to IoT and IIoT operations have significant vulnerabilities that puts devices at risk, according to analysis from Trend Micro.
New Google+ Bug Affects 52M Users, Accelerating Site's Demise
News Analysis  
12/11/2018   Post a comment
While the latest disclosure does not seem to have leaked any data, it accelerates Google+'s demise.
SD-WAN Security: Why Zero-Trust Authentication Is Key
Alan Zeichick  
12/10/2018   Post a comment
SD-WAN provides big benefits compared to traditional WAN connections between data centers and remote locations. However, authentication remains a concern. Here's why zero trust is a must.
APTs in 2018: A Mix of Old & New
Jeffrey Burt  
12/10/2018   Post a comment
Established threat groups and new players alike made for an active APTs scene this year, according to researchers with Kaspersky Lab.
Cloud, Compliance & the Death of the IT Checklist
News Analysis  
12/7/2018   1 comment
For years, IT could rely on various checklists to ensure that systems and infrastructure were in compliance with various government regulations. The cloud has upended that structure, and a new, more automated approach is now needed.
Google Chrome 71: Bugs Squashed & New Ways to Block 'Abusive Experiences'
Larry Loeb  
12/7/2018   7 comments
The latest version of the Google Chrome browser squashes numerous bugs and adds in a feature to help block what the company calls 'abusive experiences.'
North Korean-Backed Group Suspected of 'Stolen Pencil' Campaign
News Analysis  
12/6/2018   3 comments
The ASERT Team at NetScout has published a report that details a campaign dubbed "Stolen Pencil," which targeted universities and other academic groups. A North Korean-backed group is suspected of starting it.
Citrix: Password Reset Necessary to Stop Credential Stuffing Attack
News Analysis  
12/6/2018   1 comment
Citrix forced users of its ShareFile tool to reset their passwords this week, following concerns that an attacker may have attempted to use credential stuffing to access accounts.
IoT Botnets Are Increasing Source of Malware on SP Networks
News Analysis  
12/5/2018   1 comment
IoT botnets now make up 78% of the malware found on service provider networks, according to a new analysis by Nokia. These bots are being used for a wide-range of criminal activity, including cryptomining.
IT & OT Convergence: a Potential Security Nightmare
Alan Zeichick  
12/5/2018   1 comment
Industrial systems are rapidly connecting to the wider, public Internet. There are a host of security problems that comes with this convergence, however, and combing IT and OT is not the cure. Here's why.
Quora Breach Hits 100M User Accounts Containing Highly Personal Data
News Analysis  
12/5/2018   7 comments
The latest mega data breach hit question-and-answer portal Quora, which reported 100 million user accounts were accessed by a malicious third-party. The data also contains highly personal details about customers.
FBI Investigating 'Cyber Intrusion' of NRCC Report
News Analysis  
12/4/2018   2 comments
In an echo of the same cyberattack that hit Democrats two years ago, the FBI is investigating the theft of emails from the National Republican Congressional Committee, according to a public report.
Kubernetes Vulnerability Can Turn Containers Into Zombies
Larry Loeb  
12/4/2018   4 comments
For years, Kubernetes was considered secure. However, a newly published vulnerability can turn enterprise containers into zombies without proper patching.
Marriott's Due Diligence Failure Led to Massive Data Breach
Larry Loeb  
12/4/2018   5 comments
After acquiring Starwood, Marriott failed to conduct a proper review of the company's security issues. This lack of due diligence led directly to 500 million records being compromised in a data breach.
Microsoft, Mastercard Team Up on Identity Management Technology
News Analysis  
12/4/2018   1 comment
While not explicit in their announcement, it seems Microsoft and Mastercard plan to use some form of blockchain to create what they call a 'universally-recognized digital identity.'
GDPR Fines: Some Bark, Little Bite
Joe Stanganelli  
12/3/2018   6 comments
As Security Now says 'Happy Halfiversary' to GDPR, we take a look at what few GDPR fines and other DPA orders and guidance have been made public over the past six months.
Cybercriminal Underground Will Continue to Consolidate in 2019
Jeffrey Burt  
12/3/2018   Post a comment
There will be fewer malware-as-a-service families, but they will be bigger, stronger and more sophisticated, according to a report from McAfee.




Latest Articles
A new report by the US Government Accountability Office could be the catalyst for meaningful change on the Internet privacy front.
The kinds of threats an organization encounters are changing as the defenses that are brought to bear upon them change.
Russian threat actors were the most prolific last years – and were eight times faster at 'breaking out' than their nearest rival.
Cloud projects are big. Huge. So it's not perpetuating FUD to point out that cloud transformation still bears security and data-stewardship risks. But what appears too big a challenge for mere man might be no match for machine.
Zero-day vulnerabilities are serious, and on the rise. And IT-security teams make the problem worse when they fail to respond, or respond poorly, to responsible vulnerability disclosures.
Flash Poll
Video
In a wide-ranging interview, Cisco security boss Gee Rittenhouse talks about how machine learning, AI, blockchain and other emerging technologies ...
CloudPassage's new technology, called Container Secure, involves a five-step process to ensure seamless security in container deployments from the ...
You can't so much as go to a coffee shop today without hearing the word 'blockchain.' Hearing about a useful blockchain is less common, but ...
Last year, 60 million companies changed owners worldwide. That turnover makes it incredibly difficult to avoid doing business with entities (e.g., ...
Keith Furst of Data Derivatives interviews Daniel Wagner, author of a new book, Virtual Terror: 21st Century Cyber Warfare. They discuss the ways ...
All Videos
Sponsored Video
Sage Wagner, senior security pre-sales engineer with RiskSense, provides a demo of the company's latest technology 'RiskSense Solution,' a ...
Janus Technologies is launching a line of products that protect against the many threats to enterprises' sensitive data. David Schultz, vice ...
This new video will inspire companies to reimagine their business for success in a world where connectivity is more than a commodity. Sponsored Video
All Videos
Radio Shows
like us on facebook
Security Now
About Us     Contact Us     Help     Register     Events     Supporting Partners     Twitter     Facebook     RSS
Copyright © 2019 Light Reading - an Informa business, trading within KNect365 US, Inc. All rights reserved. Privacy Policy | Cookie Policy | Terms of Use
in partnership with