The majority of cyber attackers are motivated by money, but make less than $15,000 per successful attack, according to a survey of hackers in the U.S., U.K. and Germany released yesterday by the Ponemon Institute.The hackers, who were promised anony…
Survey: Average successful hack nets less than $15,000 Read More »
An increasing number of experts are urging companies to stop having the CSOs and CISOs report to the CIO in order to reduce conflict of interest, risk, even downtime and financial losses, but there hasn’t yet been much evidence of progress.To read this…
Reporting to CEO reduces risks and costs, but change comes slowly Read More »
The late December telephonic denial-of-service attack against a Ukrainian power company was a smokescreen to cover up a cyber attack, experts say.”This is one of the more common reasons why these attacks are done,” said Rene Paap, product marketing …
Telephonic DoS a smokescreen for cyberattack on Ukrainian utility Read More »
A new zero-day vulnerability has been discovered that allows Android or Linux applications to escalate privileges and gain root access, according to a report released this morning by Perception Point.”This affects all Android phones KitKat and highe…
Linux zero-day affects most Androids, millions of Linux PCs Read More »
Last week’s distributed denial of service attack against the BBC website may have been the largest in history.A group calling itself New World Hacking said that the attack reached 602Gbps. If accurate, that would put it at almost twice the size of t…
DDoS attack on BBC may have been biggest in history Read More »
Last summer, law enforcement agencies from 20 countries joined forces to shut down the notorious Darkode hacking forum. Organizers said they would be back, stronger than ever.Security researchers have been keeping an eye out for its resurgence ever …
Darkode forum is back, but a shadow of its former self Read More »
According to a new report by Trend Micro, the North American cyber criminal underground isn’t buried as deep as in other geographies.”It doesn’t exist in the dark web as much as other undergrounds do, or practice as much security,” said Tom Kellerma…
US cyber criminal underground a shopping free-for-all Read More »
There are now more than 3 billion connected devices in use by consumers, according to Gartner, and this number will increase to 4 billion next year.
A big chunk of that increase will come as a result of the holiday season, when 65 percent of Americans say they plan to buy consumer electronics gifts, according to an October report by the Consumer Electronics Association. The amount of spending on tech will reach $34.2 billion, making the the biggest tech shopping season on record, according to Shawn DuBravac, CEA’s chief economist and senior director of research.
To read this article in full or to leave a comment, please click here
Most hackable devices Read More »
ExpiredImage by ThinkstockApplications that have reached the ends of their lives are no longer maintained by their original developers, and do not receive security updates. However, many users forget to remove these applications from their machines, or…
10 riskiest applications that have passed their expiration dates Read More »
Despite recent moves against Adobe Flash by Google and Firefox and its declining use by websites, Adobe Flash remains a significant security vulnerability for end users, with 80 percent of computers running an end-of-life version of the plugin.Accor…
Despite recent moves against Adobe, 80% of PCs run expired Flash Read More »
Healthcare has become a favorite target for criminals, and some medical organizations are reacting by looking at outside providers to keep their data secure. But jumping to the cloud without first taking some precautions can be a mistake, experts sa…
Experts urge caution when putting health data in the cloud Read More »
The other day, I was in a room full of CIOs, CTOs and CISOs who — as an ice-breaking activity — were asked to share a bad security habit. One after the other admitted to bad password hygiene, such as reusing passwords.I was the only one in the roo…
Does security awareness training even work? Read More »
Containers offer a quick and easy way to package up applications and all their dependencies, and are popular with testing and development.According to a recent survey sponsored by container data management company Cluster HQ, 73 percent of enterpris…
As containers take off, so do security concerns Read More »
There’s a new botnet malware on the loose, called Corebot, that researchers believe has the potential to develop into a significant threat.The malware was first spotted by IBM Security X-Force, and Damballa followed up with a deep dive into how the …
Corebot cleverly written botnet malware with growth potential Read More »
To avoid detection, some hackers are ditching malware and living “off the land” — using whatever tools are already available in the compromised systems, according to a new report from Dell SecureWorks.
In fact, this has been the case for nearly all the intrusions analyzed by the Dell SecureWorks’ Incident Response Team last year.
The cyber criminals typically start out with compromised credentials, said Phil Burdette, senior security researcher at Atlanta-based Dell SecureWorks, Inc.
“For example, they might use phishing attacks,” he said. “They’ll send an email purporting to be from the IT staff, asking users to log in and test their credentials because the IT staff has just created a new email server. Once a user logs in, those same credentials would then be used to access the company’s virtual private network solutions.”
To read this article in full or to leave a comment, please click here
Attackers go on malware-free diet Read More »
