Cybersecurity News


Conti (Ryuk) joins the ranks of ransomware gangs operating data leak sites

More and more ransomware gangs are now operating sites where they leak sensitive data from victims who refuse to pay the ransom demand.
25 August 2020

Safari Bug Revealed After Apple Takes Nearly a Year to Patch

Safari Bug Revealed After Apple Takes Nearly a Year to Patch Polish security researcher unveiled the flaw in a cross-browser sharing API that could allow attackers to steal user files.
25 August 2020

Lazarus Group Targets Cryptocurrency Firms Via LinkedIn Messages

Lazarus Group Targets Cryptocurrency Firms Via LinkedIn Messages The North Korean-linked APT's latest campaign shows that it is shifting focus to target the cryptocurrency and financial verticals.
25 August 2020

The Fatal Flaw in Data Security

Simply stated: No matter how sophisticated your security software is, data cannot be simultaneously used and secured. But that may be changing soon.
25 August 2020

Browser-based cryptojacking sees sudden spike in activity in Q2 2020

However, there's nothing to worry about. Browser-based cryptojacking is not making a comeback.
25 August 2020

Shoring Up the 2020 Election: Secure Vote Tallies Aren’t the Problem

Shoring Up the 2020 Election: Secure Vote Tallies Aren’t the Problem With many in the public sphere warning about a potential compromise of the integrity of the Presidential Election, security researchers instead flag online resources and influence campaigns as the biggest problem areas.
25 August 2020

Lazarus group strikes cryptocurrency firm through LinkedIn job adverts

A system administrator proved to be the weak link, opening the door for Lazarus to attack.
25 August 2020

Security researcher discloses Safari bug after Apple's delays patch

Safari bug could be abused to leak or steal files from users' devices.
24 August 2020

Security researcher discloses Safari bug after Apple delays patch

Safari bug could be abused to leak or steal files from users' devices.
24 August 2020

MITRE Releases 'Shield' Active Defense Framework

Free knowledge base offers techniques and tactics for engaging with and better defending against network intruders.
24 August 2020

Google Fixes High-Severity Chrome Browser Code Execution Bug

Google Fixes High-Severity Chrome Browser Code Execution Bug The high-severity flaw, which was patched in the latest version of Google's Chrome browser, could allow code execution.
24 August 2020

CISA Releases 5G Security Guidelines

The new document defines lines of effort for developing security for the growing 5G network.
24 August 2020

Attackers Use Unicode & HTML to Bypass Email Security Tools

Researchers spot cybercriminals using new techniques to help malicious phishing emails slip past detection tools.
24 August 2020

iOS SDK caught stealing click revenue from other ad networks

The suspicious iOS SDK is used by more than 1,200 apps, with 300 million downloads/month.
24 August 2020

Report claims a popular iOS SDK is stealing click revenue from other ad networks

The suspicious iOS SDK is used by more than 1,200 apps, with 300 million downloads/month.
24 August 2020

DeathStalker APT Targets SMBs with Cyber Espionage

The hacker-for-hire group, operating since at least 2012, primarily targets financial firms.
24 August 2020

Iran-Linked ‘Newbie’ Hackers Spread Dharma Ransomware Via RDP Ports

Iran-Linked ‘Newbie’ Hackers Spread Dharma Ransomware Via RDP Ports The recent Dharma campaign by Iran-linked script kiddies shows that the ransomware is being spread not just by sophisticated, state-sponsored actors anymore.
24 August 2020

Large Ad Network Collects Private Activity Data, Reroutes Clicks

A Chinese mobile advertising firm has modified code in the software development kit included in more than 1,200 apps, maliciously collecting user activity and performing ad fraud, says Snyk, a software security firm.
24 August 2020

Dark Reading Launches New Section on Physical Security

Partnership with IFSEC enables Dark Reading to cover new areas of security and expand its audience.
24 August 2020

New Cybersecurity Code of Practice for Installers Unveiled by BSIA

The British Security Industry Association's (BSIA) cybersecurity group has released a new code of practice for installers responsible for safety and security systems.
24 August 2020