Misfortune Cookie vulnerability affects 12 million routers
A newly-discovered vulnerability puts 12 million routers at risk around the world in homes, small business, and corporate environments.
Maria Korolov | 24 Dec | Read more
Stories by Maria Korolov
Major Chinese smartphone manufacturer installed backdoor on up to 10 million devices
Coolpad, the world's sixth largest smartphone manufacturer, installed a back door that allows the company to install applications, send alerts, and monitor communications without user knowledge or approval.
Maria Korolov | 20 Dec | Read more
Organized criminals targeting individual iPhone, Android users
A well organized criminal group is targeting both iOS and Android users with highly targeted man-in-the-middle attacks, according to a new threat advisory from Akamai Technologies, Inc.
Maria Korolov | 19 Dec | Read more
New ransomware avoids hitting the same victim twice
A new strain of ransomware, OphionLocker, generates a unique hardware identifier for each new infected machine so that it can avoid hitting the same victim twice, according to new research from KnowBe4, a Florida-based security awareness training firm.
Maria Korolov | 18 Dec | Read more
Phishing spam gets 'Big Box Retailer' holiday makeover
Spam phishing emails have been updated for the holidays, with new themed emails pretending to update users on their order status from Costco, Target, Walmart, Walgreens, and Home Depot.
Maria Korolov | 17 Dec | Read more
ICANN: data breaches not due to new top-level domains
An ICANN spokesman dismissed accusations that the recent growth in the number of generic top-level domains has caused data breaches, on Thursday.
Maria Korolov | 16 Dec | Read more
Retailers must not ignore security alerts, court says
In what some security experts are calling a "game changer," a Minnesota federal court held Target liable earlier this month for data breach losses because the company had ignored its own security alerts.
Maria Korolov | 16 Dec | Read more
Catchy nicknames prompt more patching of vulnerabilities
Vulnerabilities with catchy nicknames get more attention from media, customers, and vendors and so get patched more thoroughly than similar vulnerabilities without clever names.
Maria Korolov | 11 Dec | Read more
Report: Most companies fail at keeping track of patches, sensitive data
The majority of businesses don't have a solid system for tracking sensitive data, or a mature patch management process, according to new survey of IT professionals released by Trustwave.
Maria Korolov | 10 Dec | Read more
Should Chief Marketing Officers be involved in security and privacy decisions?
In a report issued today by PricewaterhouseCoopers, the management consulting firm urged Chief Marketing Officers to get more involved in data protection.
Maria Korolov | 06 Dec | Read more
Bank-backed security utility service to serve all industry sectors
In an attempt to get ahead of cybercriminals, 16 banks have donated between $50,000 and $500,000 each to a build a new platform for sharing threat information. That platform is going live today -- and it's not just for banks.
Maria Korolov | 05 Dec | Read more
Cheapest tablets pose biggest security risks
The super-cheap Android tablets everyone bought on Black Friday and Cyber Monday could pose problems for enterprises when they arrive at the workplace after the holidays.
Maria Korolov | 03 Dec | Read more
10 deadliest differences of state-sponsored attacks
If you believe that protecting against cyberattacks from government agencies requires the same processes as defending against any other threat -- well, to some extent, you are right.
Maria Korolov | 02 Dec | Read more
5 ways PCI is becoming more security-conscious next year
The newest Payment Card Industry Data Security Standard was released this month, PCI DSS 3.0, and it is all about security instead of compliance.
Maria Korolov | 29 Nov | Read more
5 PCI Compliance gaps
With the holiday shopping season coming up, and crooks lining up to take advantage of the stress and confusion, this is a good time for merchants to review their payment security procedures.
Maria Korolov | 26 Nov | Read more