Wanted: The (Elusive) Cybersecurity ‘All-Star’
Separate workforce studies by (ISC) 2 and ISACA point to the need for security departments to work with existing staff to identify needs and bring entry-level people into the...
DoD Lets Researchers Target All Publicly Accessible Info Systems
The Department of Defense expands its vulnerability disclosure program to include a broad range of new targets.The Department of Defense (DoD) has expanded its vulnerability disclosure program to include...
Attackers Seek New Strategies to Improve Macros’ Effectiveness
The ubiquity of Microsoft Office document formats means attackers will continue to use them to spread malware and infect systems.The use of malicious macros to infect Windows systems grew...
Trump still banned from Facebook but board demands company review
Facebook Inc’s oversight board on Wednesday upheld the company’s suspension of former U.S. President Donald Trump but gave the company six months to determine a “proportionate response” going forward,...
Raft of Exim Security Holes Allow Linux Mail Server Takeovers
Remote code execution, privilege escalation to root and lateral movement through a victim’s environment are all on offer for the unpatched or unaware.
A veritable cornucopia of security vulnerabilities in...
Anti-Spam WordPress Plugin Could Expose Website User Data
‘Spam protection, AntiSpam, FireWall by CleanTalk’ is installed on more than 100,000 sites — and could offer up sensitive info to attackers that aren’t even logged in.
An SQL-injection vulnerability...
Global Phishing Attacks Spawn Three New Malware Strains
The never-seen malware strains have "professionally coded sophistication" and were launched by a well-resourced APT using nearly 50 domains, one hijacked.
Two waves of global financial phishing attacks that swamped...
