Finally, a Much-Needed Guide to Microsoft IIS Security
Your installation of Infrastructure Internet Services (IIS), Microsoft’s web server software, is probably ignored and lazily defended. ESET malware researcher Zuzana Hromcova explains to the Dark Reading News Desk...
Ohio man pleads guilty to role in $300-million cryptocurrency laundering service
Written by Sean Lyngaas Aug 18, 2021 |...
Attackers Change Their Code Obfuscation Methods More Frequently
Attackers are increasingly changing up the techniques used to obfuscate what their software is doing, with one group hiding parts of their code using a variety of techniques swapped...
FireEye Launches XDR Platform
FireEye today announced its release of FireEye XDR, an extended detection and response (XDR) platform with security protections for endpoint, network, email, and cloud, as well as a focus...
T-Mobile Confirms Data Breach
T-Mobile has confirmed unauthorized access to "some T-Mobile data" following reports that corporate resources were breached.
The update arrives after reports surfaced claiming the company had suffered a data...
Phishing Costs Reach New High of $14.8M: Report
The cost of phishing attacks has quadrupled over the past six years, causing large US companies to lose an average of $14.8 million each year, according to a new report...
Zero-Day Flaw Found in Fortinet’s FortiWeb WAF Technology
Researchers at Rapid7 today disclosed a critical zero-day vulnerability in Fortinet's FortiWeb Web application firewall (WAF) technology that attackers can exploit to gain complete control of affected devices.
The OS...
Critical Vulnerability Affects Millions of IoT Devices
Mandiant, the Department of Homeland Security's Cybersecurity and Infrastructure Security Agency (CISA), and Internet of Things provider ThroughTek have disclosed a critical vulnerability affecting millions of IoT devices that could...
‘BadAlloc’ Vuln Affects Devices Using Older BlackBerry QNX Products
BlackBerry has disclosed its QNX Real Time Operating System (RTOS) is affected by BadAlloc vulnerability CVE-2021-22156, which if exploited could allow an attacker to perform a denial-of-service or execute...
