News
  • Report on Fall 2018 Quarterly Science of Security and Privacy (SoS) Lablet Meeting
    NSA and Lablet researchers meet to discuss 2019 SoS Lablet research projects
  • "Faster Fuzzing Ferrets out 42 Fresh Zero-Day Flaws"
    A team of researchers has developed a better approach to performing fuzzing in order to find zero-day vulnerabilities in software faster. The fuzzer that has been improved upon by researchers is called American Fuzzy Lop (AFL), which falls into the…
  • "Marriott Data Breach Hits 500 Million Starwood Hotel Guests"
    Marriott, one of the largest hotel chains, has faced a data breach, which could affect 500 million guests that have made reservations for Starwood hotel brands, including Sheraton, Westin, and more. The data breached include names, addresses, passport…
  • "Anti-Botnet Guide Aims to Tackle Automated Threats"
    A new publication, called the International Anti-Botnet Guide, has recently been announced by the Council to Secure the Digital Economy (CSDE) and Consumer Technology Association (CTA). The objective of the guide is to assist organizations in the fight…
  • "Blind Spots and How to See Them: Observability in a Serverless Environment"
    Serverless computing, also known as functions-as-a-service (FaaS), is becoming popular among companies that are adopting a DevOps culture and the cloud. The use of serverless technology enables resource-intensive operational tasks to be performed by…
  • "Financial Firms Not Getting Basics Right on Cyber: UK Watchdog"
    UK financial firms will face punishment by Britain's Financial Conduct Authority (FCA) for having inadequate cyber practices. Many firms still have vulnerabilities in relation to the identification of key assets, detection, and more. This article…
  • "Agencies Will Soon Have a Cyber Hygiene Score—And Will Know Where They Rank"
    The data from cybersecurity tools provided to federal agencies by the Homeland Security Department’s Continuous Diagnostics and Mitigation program will be used to compile cyber scores. Cyber scores will indicate the cybersecurity postures of federal…
  • "Consistent Deception vs. a Malicious Hacker"
    Computer scientists at Binghamton University are working to increase the effectiveness of cyber deception tools against malicious hackers. Cyber deception is a security defense method that can be used to detect, deceive, and lure attackers away from…
  • "More Than 6,500 Dark Web Sites Erased By Hackers"
    The hacking of one of the most popular Dark Web hosting services, called Daniel's Hosting, has resulted in the take down of over 6,500 websites hidden within the dark web. A PHP zero-day vulnerability could have been abused in this attack. This…
  • "WordPress Exploit in GDPR Plugin Puts 100,000 Websites at Risk"
    A WordPress plugin intended to help site owners adhere to the General Data Protection Regulation (GDPR) was found to be containing a vulnerability that could allow attackers to take control of websites. The vulnerability affected over 100,000 websites.…
  • "Two U.S. Hospitals Hit with Ransomware"
    Two hospitals, which are owned by Ohio Valley Health Services and Education Corporation, were recently hit by ransomware attacks. The attacks significantly affected the operations of both hospitals, limiting emergency room acceptance to walk-in patients…
  • "Researchers Aim to Prevent Medical Imaging Cyberattacks"
    Researchers from Ben-Gurion University of the Negev have conducted studies centered on improving the security of medical imaging devices such as CT and mammography machines against cyberattacks. The increased connectivity of such devices makes them more…