A clutch of apparently distinct APT cyber-attack campaigns appear to be linked to one another through a single Chinese "digital quartermaster," or "arm's dealer" security firm FireEye has argued in an analysis that joins some new forensic dots.
John E Dunn | 14 Nov | Read more
Start-up Sideband Networks today came out of stealth mode with an appliance that it says can model live traffic to give visibility into applications and user devices in order to solve performance problems.
Ellen Messmer | 12 Nov | Read more
Security researchers have uncovered two unpatched vulnerabilities in Internet Explorer which have been exploited by attackers in an unusual "watering hole" campaign launched from a U.S.-based website that specializes in domestic and international security policy.
Gregg Keizer | 11 Nov | Read more
Detecting and stopping stealthy malware designed to steal sensitive information means moving fast. Start-up NetCitadel wants to put its new Threat Management Platform in the middle of the security-response game with many of the other players there now -- sandboxing, firewalling, and other technologies a company may use in order to provide a kind of orchestration and decision-making point.
Ellen Messmer | 15 Oct | Read more
An exploit for a vulnerability that affects all versions of Internet Explorer and has yet to be patched by Microsoft has been integrated into the open-source Metasploit penetration testing tool, a move that might spur an increasing number of attacks targeting the flaw.
Lucian Constantin | 01 Oct | Read more
A recently announced and yet-to-be-patched vulnerability that affects all versions of Microsoft Internet Explorer (IE) has been exploited in targeted attacks against organizations in Taiwan since the beginning of July, according to security researchers.
Lucian Constantin | 27 Sep | Read more
Infrastructure and tools used by hackers originate from network infrastructure in China, security firm Symantec says
Antone Gonsalves | 24 Sep | Read more
The Internet Storm Center on Saturday boosted its threat level to 'Yellow,' indicating a 'significant new threat' to Internet users from attacks exploiting an unpatched vulnerability in all versions of Microsoft's Internet Explorer (IE) browser.
Gregg Keizer | 23 Sep | Read more
It's not uncommon for companies to want to try and evaluate the IT security of another business before entering into an e-commerce arrangement. Now a start-up, BitSight Technologies, is out with what it calls a "rating" service to do exactly this, though there are limits to how far it can go at this point.
Ellen Messmer | 10 Sep | Read more
Android malware is following in the footsteps of Windows malware with attackers adopting some of the same distribution and monetization techniques despite the major differences between the platforms.
Lucian Constantin | 10 Sep | Read more
FireEye today announced it has started providing a threat-detection and notification service called Oculus intended to warn the enterprise security manager whenever targeted attacks seek to undermine the network for cyber-espionage purposes. Such attacks are often called "advanced persistent threats," and may be attempts by nation states or their agents to penetrate a company to steal sensitive information, such as intellectual property.
Ellen Messmer | 04 Sep | Read more
Multiple groups are leveraging the upcoming G20 summit to launch Spear Phishing attacks, including the group responsible for attacking the New York Times
Steve Ragan | 26 Aug | Read more
A wave of cyberattacks against Israeli and Middle Eastern targets this summer was the work of a highly active but shadowy hacktivist group that has started using Remote Access Trojans (RATs) previously favoured by Chinese cyber-actors, security firm FireEye has warned.
John E Dunn | 23 Aug | Read more
Security firm FireEye has released a toolset organisations can use to analyse attacks made using the Poison Ivy Remote Access Trojan (RAT), an underrated "ancient pest" it believes could offer a useful way of getting to grips with today's most sophisticated Advanced Persistent Threats (APTs).
John E Dunn | 22 Aug | Read more
Old Remote Access Trojan experiencing new resurgence among hackers
John P. Mello | 22 Aug | Read more