News

These might be boom times for anyone involved in application containerisation but lurking just under the surface are a host of security issues that development teams are only now starting to get to grips with. It’s an old story for the security industry that has played out numerous times in the past: a new technology arrives on the back of big promises and for a while security gets pushed to the side in the excitement....

A recent survey has found that one third of respondents describe the state of security monitoring within their organisation as “complex and chaotic”. AlienVault®, the leading provider of Unified Security Management™ (USM™) and crowdsourced threat intelligence, has released results of a survey showing that cloud security remains a thorn in the side of security professionals, with many still struggling to monitor this environment effectively. Conducted at RSA 2017, 974 conference participants weighed in on cloud...

Kaspersky Lab’s Global Research and Analysis Team has discovered a new sophisticated wiper malware, called StoneDrill. Just like another infamous wiper, Shamoon, it destroys everything on the infected computer. StoneDrill also features advanced anti-detection techniques and espionage tools in its arsenal. In addition to targets in the Middle East, one StoneDrill target has also been discovered in Europe, where wipers used in the Middle East have not previously been spotted in the wild. In 2012,...

Lastline Inc., the leader in advanced malware protection, announced its latest enhancements to Lastline Enterprise for Global 5000 companies. The Spring 2017 Release adds capabilities to detect and eliminate browser based-attacks, speed incident investigation for security professionals, and provide early warning of unusual or suspicious network activity. “We worked very closely with our largest global customers and partners to identify enhancements that ensure our solution addresses attack vectors that are causing the most pain,” said...

Cyber security company Positive Technologies has today launched PT VIP Protect, a technology designed to keep sensitive targets safe from the current and evolving threats from mobile phone hacking.  Key business executives, celebrities, and other high-profile individuals operating in sensitive situations all connect to mobile phone networks, which often have fundamental flaws in underlying signalling protocols. These flaws and vulnerabilities can be exploited to eavesdrop on phone conversations, intercept text messages, track location and commit...

Varonis Systems, Inc. (NASDAQ:VRNS), a leading provider of software solutions that protect data from insider threats and cyberattacks, today announced the upcoming availability for the release candidate of version 6.3.150 of its software platform that includes updates to the web-based DatAlert dashboard and enhancements to user behavior analysis (UBA) based threat detection technology. The updates prioritise suspicious activities, accelerate investigations and highlight dangerous data vulnerabilities so that an organisation can quickly view, triage, inspect and mitigate threats and...

The security and privacy advice website, Comparitech.com, is warning businesses that use programmatic advertising platforms to be wary of their ads ending up on fake news or hate speech websites.  In a stand to crack down on the spread of fake news, Comparitech.com is urging brands to blacklist known fake news and hate speech websites from their ad platforms, with a guide on how to blacklist certain websites from featuring their ads. “Fake news websites...

From 2007 through 2015, the US Transportation Security Administration (TSA) spent $1.5 billion trying to identify potentially dangerous travelers by observing their behavior through an ongoing program called SPOT. SPOT stands for "screening of passengers by observation techniques." And according to the TSA's own documents, obtained through a lawsuit filed by the American Civil Liberties Union (ACLU), the techniques employed by the agency to detect untrustworthy travelers are unscientific and unreliable.  View full story ORIGINAL SOURCE:...

Security researchers have stumbled upon a Windows Trojan that hackers are using to help with the distribution of the infamous Mirai Linux malware, used to infect IoT devices and carry out massive DDoS attacks. The Mirai malware was initially developed in late 2015 and early 2016, and only became a massive threat in the summer and autumn of 2016, when it spread to hundreds of thousands of routers and DVRs (deployed with smart cameras and...

An unknown actor whose targets and tactics resemble those of a Russian advanced persistent threat group has been compromising the websites of foreign embassies, ministries and organisations, in an attempt to infect certain site visitors with malware. According to a Tuesday blog post by Forcepoint, whose threat intelligence feeds uncovered the threat, the mysterious campaign is reminiscent of the Turla group, a Russian APT that notably infected US Central Command in 2008. View full story ORIGINAL SOURCE: SC magazine