Security

Security news, trends, analysis and practical advice

adobe flash player v10 icon
Security

ios devices

KeyRaider malware stole over 225,000 Apple credentials from jailbroken iOS devices

A new iOS malware targeting jailbroken Apple devices has pulled off the "largest known Apple account theft caused by malware."

snapdragon security

Qualcomm's Snapdragon 820 processor gets technology to secure Android phones

Qualcomm is promising to improve security and privacy on high-end smartphones with Snapdragon Smart Protect, which uses on-device machine learning to help detect zero-day malware.

Apple security

'KeyRaider' iOS malware targets jailbroken devices

Credentials for more than 225,000 Apple accounts have been stolen by sophisticated malware that targets modified iOS devices, according to Palo Alto Networks.

top secret data protection security

Review: How to protect top-secret data

In our tests, IQProtector’s file encryption tool successfully secured corporate documents from prying eyes.

NSA headquarters.

NSA bulk call records collection extended for last time

The U.S. National Security Agency's controversial program for the bulk collection of domestic call records has been granted extension for the last time, according to documents released.

Hacker

Russian-speaking hackers breach 97 websites, many of them dating ones

Russian-speaking hackers have breached 97 websites, mostly dating-related, and stolen login credentials, putting hundreds of thousands of users at risk.

Padlock

U.S. agency to seek consensus on security-vulnerability disclosures

The U.S. National Telecommunications and Information Administration will host a series of discussions about the best way to disclose cybersecurity vulnerabilities.

NSA headquarters.

NSA wins battle over phone records collection as court lifts injunction

A U.S. appeals court has overturned a district court injunction against the National Security Agency's bulk collection of domestic telephone records.

Google to freeze some Adobe Flash content starting Sept. 1

Google will stop some Flash content from automatically playing starting Sept. 1, a move it decided on earlier this year to improve browser performance.

Security in cloud computing

BitTorrent patches flaw that could amplify distributed denial-of-service attacks

BitTorrent fixed a vulnerability that would have allowed attackers to hijack BitTorrent applications -- used by hundreds of millions of users -- to amplify distributed denial-of-service (DDoS) attacks.

Researchers find holes in routers supplied by ISPs

Some routers vulnerable to remote hacking

Several DSL routers from different manufacturers contain a guessable hard-coded password that allows accessing the devices with a hidden administrator account.

healthcare it security jobs

More than 80% of healthcare IT leaders say their systems have been compromised

A survey of IT leaders in healthcare revealed that 81% of them believe their systems have been compromised by at least one malware, botnet or some other cyber-attack in the past two years, placing patient sensitive data at risk.

Why we love last-millennium password policies

IT pilot fish goes to work at a large retailer's distribution center, where the policy is that passwords must be changed every 90 days -- which turns out to have unexpected consequences.

phishing costs

Security education on phishing can save companies millions

Research by the Ponemon Institute finds that a comprehensive security training program with a continuous training methodology can reduce phishing and save companies money.

Fraud gang targeted large European companies

Security concerns prompt largest Tor dark market to suspend operations

Administrators of Agora, the largest online black marketplace operating on the Tor anonymity network, decided to temporarily suspend the website because of possible attacks based on recent methods of exposing Tor Hidden Services.

Unlocked circuit board / security threat

Agora Dark Web market discovers suspicious activity on servers, pauses operations

The Agora Dark Web market cited Tor Hidden Services security vulnerabilities that could allow de-anonymization attacks and temporarily shut down operations after discovering suspicious activity on its servers.

Phishing key

Phishing is a $3.7 million annual cost for average large company

The average 10,000-employee company spends $3.7 million a year on dealing with phishing attacks, according to a new report from the Ponemon Institute

Phishing key

Phishing is a $3.7-million annual cost for average large company

The average 10,000-employee company spends $3.7 million a year on dealing with phishing attacks, according to a new report from the Ponemon Institute

Load More