News
-
"Phishers Add Chatbot to the Phishing Lure"Researchers at Trustwave SpiderLabs have discovered a new approach being taken by phishers to increase victim engagement and confidence: the addition of an interactive chatbot. The phishers hope that this reluctant acceptance of chatbots will help… -
"Half of IT Leaders Store Passwords in Shared Docs"According to new research by identity management vendor Hitachi ID, nearly half (46%) of IT and security leaders still store corporate passwords in office documents like spreadsheets, exposing their organization to significant cyber risk. It is…
-
"New Solution Aims to Address Quantum Security Threats"Quantum computing will significantly increase computing power. However, that capability poses a threat to cryptographic systems, potentially jeopardizing global data. To solve the problem, QuSecure is introducing an industry-first end-to-end post-quantum…
-
"Info-Stealing 'Cryware' Targeting Cryptocurrency Wallets"The Microsoft 365 Defender Research Team observed a new type of malware that collects and exfiltrates data directly from cryptocurrency wallets. The researchers dubbed the information-stealing malware "cryware." According to the researchers,…
-
"Bad Bots Swarm the Internet in Record Numbers in 2021"According to researchers at Imperva, malicious bots accounted for almost 28% of global web traffic in 2021, a record high that exceeded the previous year’s figure of 26%. The researchers stated that bots are software apps that run automated tasks…
-
"Ransom Demands Surge 45% in 2021"According to new research conducted by Group-IB, the average ransom demand in 2021 was $247,000, 45% more than the previous year, with most threat actors trying to force payment via double extortion tactics. During the study, the Group-IB compiled…
-
"Microsoft Has Issued Warning About Brute-Force Attacks on MSSQL Servers"Microsoft has issued a warning about brute-force attacks on Internet-exposed and inadequately protected Microsoft SQL Server (MSSQL) database servers using weak passwords. Although this is not the first time MSSQL servers have been attacked, Redmond…
-
"April VMware Bugs Abused to Deliver Mirai Malware, Exploit Log4Shell"According to researchers, a GitHub proof-of-concept exploit of recently disclosed VMware bugs is being used by hackers in the wild. Hackers are exploiting the reported VMware bugs in order to deliver Mirai Denial-of-Service (DoS) malware and exploit the…
-
"NIST Leaning on Strong Feedback for Cyber Framework Update"The National Institute of Standards and Technology (NIST) is working on updating its influential Cybersecurity Framework, which was first published in 2014 and updated in 2018. A NIST official stated on May 17 that the agency is relying on industry…
-
"Ransomware Groups Continue to Leverage Old Vulnerabilities"A new report from Cyber Security Works (CSW) says researchers observed ransomware groups exploiting vulnerabilities that were several years old. The discovery highlights a continuing trend in which threat actors target known vulnerabilities and trusted…
-
"Zero-Trust Architecture May Hold the Answer to Cybersecurity Insider Threats"An MIT Lincoln Laboratory study explored the implementation of zero-trust security, a cybersecurity approach that requires users to prove their authenticity every time they access data or a network application. The goals of the study were to review the…
-
"Cryptography Security Enhanced Through Zero-Knowledge Schemes"Dr. Yupeng Zhang, assistant professor in the Department of Computer Science and Engineering at Texas A&M University, has received the National Science Foundation's (NSF) Faculty Early Career Development (CAREER) Award for his research project focused…