News
-
"Most Phishing Pages Are Short-Lived"New research conducted by Kaspersky has revealed that the lifespan of most phishing pages is as brief as that of an adult mayfly. Between July 19 and August 2, 2021, researchers analyzed 5,307 examples of phishing pages. They found that within 13… -
"First Real-World Study Shows the Potential of Gait Authentication to Enhance Smartphone Security"Real-world tests conducted by researchers at the University of Plymouth have shown that gait authentication could be a feasible way to protect smartphones and other mobile devices from cybercrime. The study involved asking smartphone users to go through…
-
"DARPA Announces SMOKE Program"US military network-security researchers have launched a new program to discover more about the tactics of malicious hackers. The Signature Management Using Operational Knowledge and Environments (SMOKE) program was announced on Tuesday. …
-
"Three-Quarters of Firms Admit Sub-Optimal IoT Security"Researchers at Inmarsat have found that global businesses have become more risk aware as they deploy IoT projects, but over three-quarters (77%) admitted that these systems could be more secure. The researchers polled 450 individuals responsible…
-
"Researchers Discover GraphQL Authorization Flaws in FinTech SaaS Platform"New Application Programming Interface (API) threat research from Salt Labs highlights GraphQL API authorization vulnerabilities contained by a B2B financial technology (FinTech) platform. Findings from the analysis of this FinTech provider's mobile…
-
"Malicious Notepad++ Installers Push StrongPity Malware"The hacking group known as StrongPity is spreading malware-laced Notepad++ installers. The group, also known as APT-C-41 and Promethium, was previously observed distributing trojanized WinRAR installers between 2016 and 2018 through highly-targeted…
-
"300,000 MikroTik Routers Are Ticking Security Time Bombs"About 300,000 MikroTik routers are vulnerable to remote attacks that can secretly add the devices to a botnet to steal sensitive user data and engage in Distributed Denial-of-Service (DDoS) attacks. Researchers at the security firm Eclypsium estimated…
-
"Half of Websites Still Using Legacy Crypto Keys"According to new research, the internet is becoming more secure overall, but slightly more than half of websites' digital keys are still generated via legacy encryption algorithms. Security firm Venafi analyzed the world’s top one million sites…
-
"Passports Now Most Attacked Form of ID"Onfido has recently released its annual report titled "Identity Fraud Report." Document fraud specialists at Onfido process, millions of identity documents every year, helping clients detect fraud across 2,500 document types issued by 195 countries…
-
"The Dark Web Has Its Own People's Court"Researchers at the threat intelligence firm Analyst1 analyzed several major cybercrime forums and found that at least two of them have an informal type of court system. These courts allow cybercriminals to file grievances and settle disputes with their…
-
"Software Vulnerabilities Up by 20% in 2021"Researchers at HackerOne discovered that software vulnerabilities increased by 20% in 2021 compared with 2020. The bug bounty platform said its hackers had uncovered over 66,000 valid vulnerabilities this year, while hacker-powered pentests…
-
"New Guidance Pushes Federal Agencies Toward Automated Incident Reporting"The White House is changing how federal agencies report security incidents to make the incident reporting process easier and more efficient. New guidance issued by the Office of Management and Budget (OMB) will require the US Homeland Security Department…