News
-
Pub Crawl #39Pub Crawl summarizes, by hard problems, sets of publications that have been peer reviewed and presented at SoS conferences or referenced in current work. The topics are chosen for their usefulness for current researchers. -
"Cybercriminals Are Using IM Platforms as Marketplaces"Researchers at IntSight have discovered that cybercriminals are increasingly using IM platforms like Telegram, Discord, Jabber, WhatsApp, IRC, and others to advertise and sell their goods and services. The researchers believe that the reason why…
-
"Expanding Access to Cyber Research Tools"Cybersecurity research software developed by Sandia National Laboratories, called minimega, can now be accessed by faculty and students at Purdue University. This is the first time Sandia has partnered with an academic community to make its software…
-
"Sony Launches PlayStation Bug Bounty Program on HackerOne"Sony has announced the launch of a bug bounty program aimed at finding vulnerabilities in the PlayStation 4 (PS4) gaming console and the PlayStation Network. The company has partnered with HackerOne to help run the program. The security community, gamers…
-
"Online Trackers Follow Health Site Visitors"Researchers at Cornell Tech conducted a study to explore whether the types of websites people are visiting affect how third-party trackers follow them around the internet. The study found that Internet trackers are more likely to follow those who visit…
-
"Can Tracking Hardware-Level Activity Protect Children's Online Privacy?"Researchers at the University of Texas at Dallas created a tool that can be used to determine whether a mobile game or app meets the requirements under the Children's Online Privacy Protection Act (COPPA). A study conducted at the university in which 72…
-
"Most Malware in Q1 2020 Was Delivered Via Encrypted HTTPS Connections"Researchers at WatchGuard discovered that 67 percent of all malware in Q1 of 2020 was delivered via encrypted HTTPS connections. They also found that 72 percent of encrypted malware was classified as zero day, which means they would have evaded…
-
"Duration of Application DDoS Attacks Increasing, Some go on For Days"Researchers at Imperva have found that there have been seven major application DDoS attacks over the previous month. Over 150,000 requests per second (RPS) were identified. Two of the seven attacks lasted five and six days consecutively, which is…
-
"Two-Year Data Breach at Florida Senior Care Provider"Cano Health, a Florida senior care provider, experienced a prolonged security breach that went unnoticed for two years. Further investigation of the breach revealed that threat actors compromised three employee email accounts. Patients' personal…
-
"Report Finds Two-Thirds of Malware Is Encrypted, Invisible Without HTTPS Inspection"According to WatchGuard Technologies' Internet Security Report for Q1 2020, 67% of all malware detected in the first three months of the year were delivered via encrypted HTTPS connections to bypass signature-based protections. The report also revealed…
-
"3 Key Ways to Bolster Healthcare Cybersecurity With MFA, Training"The healthcare sector continues to face a growing range of cyber threats during the COVID-19 pandemic as telework and telework increases. Security researchers and federal agencies have reported surges in cyberattacks against cloud services, remote…
-
"Sodinokibi Ransomware Gang Targets POS Software"Researchers at Symantec have discovered that the Sodinokibi ransomware gang is targeting point-of-sale payment device software after infecting networks with its crypto-locking malware. The researchers identified three instances, and it is not clear…