News
  • "New 'Glowworm Attack' Recovers Audio From Devices' Power LEDs"

    Researchers at the Ben-Gurion University of the Negev have demonstrated a method for spying on electronic conversations. They released a new paper outlining a novel passive form of the TEMPEST attack called Glowworm. The Glowworm attack transforms minute…

  • "1M Stolen Credit Cards Hit Dark Web for Free"

    Researchers have discovered that threat actors have leaked 1 million stolen credit cards for free online as a way to promote a relatively new and increasingly popular cybercriminal site dedicated to selling payment card credentials.  The cards were…

  • "Engineer at Sandia Labs Turns Error Detection into 'Secret Language' for Data Security"

    Celestino Corral, an electrical engineer at Sandia National Laboratories (SNL), developed a method that uses error-checking computer code to improve the security of digital content, such as email and social media messaging. Corral started working on…

  • "Salesforce Communities Could Expose Business-Sensitive Information"

    Researchers at Varonis have found that numerous publicly accessible Salesforce communities are misconfigured and could expose sensitive information.  A Salesforce Community site lets customers and partners interface with a Salesforce instance from…

  • "Do You Hear What I Hear? A Cyberattack."

    Cybersecurity analysts work with a significantly large amount of data, especially in the performance of activities such as monitoring network traffic. Yang Cai, a senior systems scientist at CyLab, stresses that important patterns often get buried by a…

  • "Hackers Build a Better Timing Attack to Crack Encryption Keys"

    Mathy Vanhoef, a postdoctoral researcher at New York University Abu Dhabi, along with Tom Van Goethem of KU Leuven's imec-DistriNet research group, have developed a new type of timing attack that can crack encryption more efficiently. Timing attacks are…

  • "CISA Releases New Training Guide for Government Cyber Workforce"

    The U.S. Homeland Security Department's Cybersecurity and Infrastructure Security Agency (CISA) has released a new training guide, titled the Cybersecurity Workforce Training Guide. This guide is intended to help IT professionals within the Federal and…

  • "May 2021 Saw a 440% Increase in Phishing, The Single Largest Phishing Spike on Record"

    Researchers at Webroot Brightcloud published some of their findings in their mid-year threat report recently.  The researchers found that around half of businesses (45.49%) and consumers (52.35%), on average, saw at least one sustained additional…

  • "Average Ransomware Demands Surge by 518% in 2021"

    The Unit 42 security consulting group released new results found during their research that show that the average ransomware demands surged by 518% in the first half of 2021 compared to 2020, while payments climbed by 82% in the same period.  The…

  • "Post-Quantum Chip Has Built-in Hardware Trojan"

    A team of researchers working with Georg Sigl, Professor of Security in Information Technology at the Technical University of Munich (TUM), has designed and commissioned the production of a computer chip that efficiently implements post-quantum…

  • "Analysis of ICS Exploits Can Help Defenders Prioritize Vulnerability Remediation"

    The Industrial cybersecurity firm Dragos released results from its analysis of exploits targeting vulnerabilities contained by industrial control systems (ICS) and operational technology (OT) systems. Dragos has tracked over 3,000 ICS and OT…

  • "Amazon Kindle Security Flaws Could Have Let Hackers Hijack Your Device"

    Security researchers at Check Point Research (CPR) found security flaws in Amazon Kindle, which were patched by the e-commerce giant in a recent Kindle firmware update. The exploitation of the security flaws could have allowed an attacker to obtain…