News

SentinelOne, the autonomous endpoint protection company, and Intel today announced the integration of hardware-based Intel® Threat Detection Technology (Intel TDT) Accelerated Memory Scanning capabilities with the SentinelOne autonomous endpoint protection console. Independent benchmark testing from Passmark Software validates that SentinelOne’s approach, using Intel’s silicon to power threat scanning, significantly increases detection rates of memory-based attacks such as crypto miners, while providing a 10x improvement in scanning time with no increase in CPU usage. Intel and...

YouTube has blocked comments on videos featuring children which “could be at risk of attracting predatory behaviour". The site has moved to disable comments on tens of millions of videos this week after a user discovered a “wormhole into a soft-core paedophilia ring " on the video sharing website. It said that in future it would disable comments on all videos of "young minors". US-based YouTube user Matt Watson said he had found instances of commenters targeting videos of...

Police in England and Wales recorded 1,944 incidents of sexual communication with children in the six months to September 2018, the NSPCC said. Instagram was used in 32% of the 1,317 cases where a method was recorded, Facebook in 23% and Snapchat in 14%. Instagram and Facebook said they "aggressively" fought grooming, while Snapchat said it was "unacceptable". Following pressure from campaigners, sexual communication with a child became an offence in April 2017. Source: Reuters

U.S Secretary of State Mike Pompeo said on Friday that the world should be “eyes wide open” about the risks of using Chinese technology, and that there could be problems for American firms operating in certain places where Huawei equipment was deployed. Pompeo was asked during a visit to Manila about the prospect of the Philippines using Huawei 5G technology in future as it seeks to modernise outdated telecoms infrastructure. Source: Reuters

Nineteen-year-old Santiago Lopez, who goes by the handle @try_to_hack, has become the world’s first hacker to make $1m from hacking legally. He started reporting security weaknesses to companies through HackerOne bug bounty programmes in 2015, and has since reported more than 1,600 security flaws to organisations, including Twitter and Verizon Media Company, as well as private corporate and government initiatives. A bug bounty is an award given to a hacker who reports a valid security weakness to an organisation, and is becoming a...

A Dow Jones watchlist containing records of individuals who are of interest to financial companies due to their potential high risk as customers has been leaked online. Prominent security researcher Bob Diachenko found a public Elasticsearch cluster containing the sensitive records of these individuals, brought together in a list compiled by Dow Jones, on February 22, 2019. The cluster contained a database which was open to any member of the public who is able to use an...

Cybereason, creators of the leading Cyber Defense Platform, today announced it has outperformed every competitor as a result of the MITRE ATT&CK Evaluations, released earlier today. The company’s Cyber Defense Platform demonstrates best-in-class automated threat detection, including total coverage across all MITRE ATT&CK phases, the most real-time alerts, and correlation. As a high-level benchmark, the results show that Cybereason covered more of the ATT&CK framework included in the evaluations than any of the other eight...

Radiflow, a leading provider of industrial cybersecurity solutions for industrial automation networks, today announced that the company has added dynamic vulnerability assessment scoring capabilities in the new release of its iSID industrial threat detection solution. The current practices for risk assessments and security remediations employed by industrial enterprises and critical infrastructure operators generally rely on manual evaluations and follow unstructured processes. These processes are often time consuming and are not sufficiently responsive to changes in...

State-sponsored attackers continued to be extremely active in 2018 with major groups from at least a dozen countries involved in operations targeting government, business, and civilian targets throughout the year, according to analyses by two security firms. While advanced persistent threat (APT) groups have, in the past, often used custom frameworks to help compromise systems and exfiltrate data, current groups are just as likely to use open-source malware and legitimate administration tools as a way...

Last week, the sports trading card and collectible company Topps issued a data breach notification stating that it was affected by an attack, which possibly exposed the payment and address information of its customers. This type of attack is called a MageCart attack, which is when attackers hack a site to inject a malicious script into a site's checkout or cart pages. When a visitor enters their payment and address information, this script will copy the submitted data...