News

There's a new branded bug in town, but thankfully it only hurts kit made by F5 Networks. “Ticketbleed” (so named for a similarity to the notorious 2014 Heartbleed) is specific to F5's Big-IP appliances and can strike when virtual servers running on those boxes are configured with a Client SSL profile that has the non-default Session Tickets option. View full story ORIGINAL SOURCE: The Register

HackerOne has announced that it managed to attract $40 million in Series C financing and it is now planning to use the cash to grow the platform even more. HackerOne is a bug bounty platform that’s used by thousands of companies across the world that are looking for researchers that can responsibly look for security flaws in exchange for cash rewards and credit. There are over 100,000 hackers working with HackerOne at this moment. View...

The recent Tesco Bank hack has left the retail banking world reeling, searching for answers and more effective ways to secure networks against future attacks. It has been revealed weaknesses in the bank’s mobile applications left the door open for cybercriminals to brute force their way in and take more than £2.5 million of customers’ money. Worse still, the bank had been warned by several security experts of this weakness prior to the attack. How...

Fujitsu is launching a comprehensive portfolio of services to help organisations comply with the EU General Data Protection Regulation (GDPR). The new legislation, which will come into effect on May 25, 2018, introduces new obligations for all organisations – no matter where they are based – that store, process or analyse personal data of EU residents. Fujitsu services related to the EU GDPR are aimed at helping organisations to be both aware of and prepared...

Corero Network Security’s (LSE: CNS) today introduced SmartProtect, a new program to enable DDoS Protection-as-a-Service (DDPaaS) for hosting providers and  internet service providers (ISPs) to deliver to their customer base. With SmartProtect, providers take advantage of Corero’s SmartWall® Network Threat Defense (TDS) solution to successfully offer their downstream customers a managed DDoS security service that delivers advanced DDoS protection for these businesses and in turn, drive new service revenue. “Corero SmartProtect is a new program designed...

Unlike legacy signature-based detection systems, today’s generation of AI-powered security technologies are rarely suited to a plug-it-in-and-watch-it-light-up evaluation strategy. They often include a mix of supervised and unsupervised machine learning, automated threat hunting, trained classifiers, and focus on reducing the number of erroneous and unactionable alerts. As a result, evaluating their detection efficacy requires carefully planned testing before making a buying decision. For products focused on detecting network-borne threats, it is always wise to account...

Today, Citrix announced new research which revealed that an average of £27,818 is now spent by many local authorities on health and safety training, nearly double the spend in 2015 (£14,061 per local authority). This is considerably more than the amount being committed to data protection and IT security training - just £3,378 per local authority. This new data was obtained by a Freedom of Information (FoI) request issued to 129 local authorities, with 109...

Necurs, thought to be one of the world's largest botnets, returned online in June this year, and once again began to terrorize victims who got in its path. Necurs is responsible for millions in dollar losses linked to Locky ransomware and Dridex banking Trojan infections. In this short video, AppRiver's experts discuss how they noticed and questioned the significant decrease in the virus traffic. According to their's blog the botnet wasn’t taken down earlier in June, but randomly...

The growing threat of ransomware attacks in 2016 raises concerns among businesses and consumers alike (“Locky” and “Zepto” being just two examples). In this short video, Appriver’s experts talk about the data cyber attackers are going after and which can kindly be decrypted and returned to the victim in exchange of a particular sum of money. To get the latest insights from AppRiver, sign up to their blog.

What makes macros malware so dangerous is the fact that their authors use the macro power for creating bits of code that can download and execute malicious files when the documents are run on a victims machine. Moreover, recently even the Office object linking and embedding (OLE) capabilities have been misused to trick users into enabling and downloading harmful content. In this video AppRiver's security experts focus on the ways users are tricked into triggering such hostile software. To...