News
  • "Unpatched Android OS Flaw Allows Adversaries to Track User Location"
    The Android mobile operating system contains a vulnerability that could be exploited by attackers to track the location of users. The vulnerability derives from the problem of cross-process information leakage. This article continues to discuss the…
  • "Researchers Created Fake 'Master' Fingerprints to Unlock Smartphones"
    Researchers at New York University and the University of Michigan have developed a technique to generate fake fingerprints that can deceive fingerprint scanners on smartphones. The fake fingerprints can be matched with a significant number of real…
  • "Researchers Discover Seven New Meltdown and Spectre Attacks"
    Seven new variations of the Meltdown and Spectre attacks that abuse speculative execution capabilities of modern CPUs have recently been revealed by a team of researchers. These new attacks affect AMD, Intel, and ARM processors. This article continues to…
  • "Google's First Android Security Transparency Report Highlights Dangers of Third-Party App Stores"
    Google recently released its first Android Ecosystem Security Transparency report, which brings further attention to the importance of downloading Android apps from the Google Play store instead of unofficial third-party stores. According to findings…
  • "Flaws in Roche Medical Devices Can Put Patients at Risk"
    Security vulnerabilities have been found in medical devices made by Roche. According to researchers, the vulnerabilities that they have discovered pose a threat to the well-being of patients as they affect blood glucose meters. This article continues to…
  • "Technique for Preventing Extraction of Finger Vein Patterns from Photographs"
    Fingerprint vein authentication has become a popular way in which users authenticate themselves at bank ATMs and on other systems. However, finger vein patterns have been found to be extractable via visible-light images. Researchers have developed a…
  • "Threat Actors Exploiting Red Team Tool JexBoss"
    A US-CERT alert has been issued by DHS' National Cybersecurity and Communications Integration Center (NCCIC) pertaining to the abuse of a red team tool by attackers, called JexBoss (JBoss Verify and EXploitation). Attackers are testing and…
  • "Iran May Launch Cyberattacks in Retaliation for New U.S. Sanctions"
    Iran is expected to launch increasingly hostile cyberattacks on its regional neighbors in response to new sanctions on its economy that have been imposed by the U.S. In addition to an increase in the execution of more aggressive cyberattacks, Iran is…
  • "Working from Anywhere, Keeping Your Files in Sync and Staying Secure"
    In an effort to increase productivity, many enterprises of today allow their employees to work remotely from home or in other locations such as hotels, coffee shops, and more. However, there are security precautions that employees should take when…
  • "DHS Wants to Expand the Reach of Its Critical Infrastructure Cyber Training"
    The U.S. Department of Homeland Security wants the ability to simultaneously train 5,000 or more critical infrastructure operators on cybersecurity. This extended reach of training is expected to be accomplished through the use of a new video…
  • "Hackers Infect Nearly 700,000 Sites with Bitcoin-Stealing Malware"
    StatCounter is one of the most widely used web traffic analytics services that has recently been discovered by security researchers from ESET to be hacked by cybercriminals in order to inject websites with Bitcoin-stealing malware. The malware targets…
  • "Symantec Uncovers North Korean Group's ATM Attack Malware"
    Symantec researchers have discovered a malware tool used by the North Korean hacking group, Lazarus, to drain ATMs of cash. Through the use of the FastCash Trojan, the Lazarus Group has stolen millions of dollars from ATMs that are primarily located in…