News
  • "Police Arrest Suspected Ransomware Actor in Romania"
    European and US law enforcers have joined forces to arrest a suspected ransomware affiliate member who targeted firms in an IT supply chain attack.  Europol’s European Cybercrime Centre (EC3) supported the FBI and Romanian National Police in making…
  • "Quantum Communication Research Network Launched"
    It is essential to continue efforts to improve the security of information exchange as digitalization grows. A communication network based on the laws of physics is one of the main methods proposed to ensure undetected eavesdropping is made impossible.…
  • "Log4j Flaw: Attackers Are Making Thousands of Attempts To Exploit This Severe Vulnerability"
    Malicious cyber actors are making more than 100 attempts to exploit a critical security vulnerability contained by the Java logging library Apache Log4j every minute, according to security researchers at Check Point. The Log4j vulnerability, also now…
  • "Sprawling Active Attack Aims to Take Over 1.6M WordPress Sites"
    An active attack against more than 1.6 million WordPress sites is underway, with researchers spotting tens of millions of attempts to exploit four different plugins and several Epsilon Framework themes.  The researchers stated that the adversaries'…
  • "Most Phishing Pages Are Short-Lived"
    New research conducted by Kaspersky has revealed that the lifespan of most phishing pages is as brief as that of an adult mayfly.  Between July 19 and August 2, 2021, researchers analyzed 5,307 examples of phishing pages. They found that within 13…
  • "First Real-World Study Shows the Potential of Gait Authentication to Enhance Smartphone Security"
    Real-world tests conducted by researchers at the University of Plymouth have shown that gait authentication could be a feasible way to protect smartphones and other mobile devices from cybercrime. The study involved asking smartphone users to go through…
  • "DARPA Announces SMOKE Program"
    US military network-security researchers have launched a new program to discover more about the tactics of malicious hackers.  The Signature Management Using Operational Knowledge and Environments (SMOKE) program was announced on Tuesday.  …
  • "Three-Quarters of Firms Admit Sub-Optimal IoT Security"
    Researchers at Inmarsat have found that global businesses have become more risk aware as they deploy IoT projects, but over three-quarters (77%) admitted that these systems could be more secure.  The researchers polled 450 individuals responsible…
  • "Researchers Discover GraphQL Authorization Flaws in FinTech SaaS Platform"
    New Application Programming Interface (API) threat research from Salt Labs highlights GraphQL API authorization vulnerabilities contained by a B2B financial technology (FinTech) platform. Findings from the analysis of this FinTech provider's mobile…
  • "Malicious Notepad++ Installers Push StrongPity Malware"
    The hacking group known as StrongPity is spreading malware-laced Notepad++ installers. The group, also known as APT-C-41 and Promethium, was previously observed distributing trojanized WinRAR installers between 2016 and 2018 through highly-targeted…
  • "300,000 MikroTik Routers Are Ticking Security Time Bombs"
    About 300,000 MikroTik routers are vulnerable to remote attacks that can secretly add the devices to a botnet to steal sensitive user data and engage in Distributed Denial-of-Service (DDoS) attacks. Researchers at the security firm Eclypsium estimated…
  • "Half of Websites Still Using Legacy Crypto Keys"
    According to new research, the internet is becoming more secure overall, but slightly more than half of websites' digital keys are still generated via legacy encryption algorithms.  Security firm Venafi analyzed the world’s top one million sites…