SEARCH
All Articles
HTTP Request Smuggling Bug in Go Affects Kubernetes
A flaw in the way Go handles some invalid HTTP headers could allow an attacker to authenticate as any user on a Kubernetes server in some instances.
Custom Instructions Comes to Arm, Secure Design Has to be On Board
Arm is bringing custom instructions to its Cortex-M processors. The overall security of these processors will depend on how these instructions are actually implemented.
Decipher Podcast: Kenn White
Kenneth White of MongoDB joins Dennis Fisher to discuss the challenges of encryption implementations in modern enterprise networks.
Lazarus Group Deploying New macOS Backdoor
The Lazarus APT group has developed another macOS backdoor that has been delivered through a fake cryptocurrency trading app.
Industry Alliance to Make Security Products Work Together
Some of the biggest names in security have banded together for a new industry initiative to make it easier for different security technologies to work together.
Imperva Breach Stemmed From Compromised Internal Compute Instance
A data breach disclosed in August by Imperva came from an AWS API key stolen from a compromised internal compute instance in 2017.
California Releases Draft Rules for CCPA
CCPA becomes law on Jan. 1. The California Department of Justice has released draft rules on how businesses should make sure they don't violate the new data privacy law.
FIN7 Attackers Roll Out New Tools
The FIN7 group has begun deploying new tools, including a module that specifically targets a remote administration tool for payment card systems.
Audit Uncovers Critical Flaw in iTerm2
A Mozilla-funded security audit of the iTerm2 terminal emulator for macOS found a critical remote-code execution bug.
Microsoft Identifies Targeted Attacks on Presidential Campaign, Government Officials
An attack group known as Phosphorus that is linked to the Iranian government has targeted email accounts of U.S. government officials and people associated with a presidential campaign.
Complying With the California Privacy Law Could Cost $55 Billion
Companies pay attention to privacy legislation and regulations because they don't want the penalties and fines. There is also a hefty cost associated with becoming compliant in the first place.
FBI Okays Paying in a Ransomware Attack
The FBI does not advocate paying a ransom because there's no guarantee the organization will get the data back, but acknowledged in an updated guidance that sometimes, for some organizations, paying the ransom makes a lot of sense.
Urgent/11 Flaws Now Affect Broader Range of Medical, Network Devices
The Urgent/11 vulnerabilities in the IPnet stack affect a much broader range of devices than originally thought.
Geost Android Botnet Discovered by Basic Mistakes
Even the most sophisticated botnet can be discovered if the group doesn't take steps to hide its activities.
Nevada Joins the Ranks of States With Consumer Privacy Laws
Nevada joins the list of states with legislation on the books giving residents more control over how their personal information is used.