Threats and Risks
Encryption weaknesses in RSA certificates leave IoT devices vulnerable to attack
Researchers find one-in-172 RSA certificates using a common factor to generate keys
Warning over Zeppelin ransomware targeting healthcare and tech firms across Europe and US
Analysis of Zeppelin's code suggests that it was first compiled last month
Warning over Fullz House Magecart threat group using phishing and web skimming to compromise web payments
Fullz House Magecart threat group has branched out from selling 'Fullz' - full packages of information - on underground trading sites
Vulnerability in Qualcomm's Secure Execution Environment could allow hackers to steal sensitive data from Android devices
QSEE is an implementation of Trusted Execution Environment based on ARM TrustZone technology
Warning over new Bluetooth security vulnerability
Devices become vulnerable when they are initially paired to a mobile app
Magecart group 5 is linked to Carbanak and Dridex banking Trojan
The 'modus operandi' of Magecart 5 is very different from other, similar threat groups, according to Malwarebytes
Iran-linked APT 'Charming Kitten' adds new impersonation tactics to trick potential victims
The group, also known as APT35, is thought to have recently targeted the US presidential primary elections
Transport, shipping and utilities targeted in two new malware campaigns
One campaign involves an alleged state-sponsored threat group that has compromised at least 17 US utilities in the past five months
Microsoft president Brad Smith calls for international convention to tackle 'unstoppable' rise of killer robots
US, Russia, China, Israel, and South Korea are all working on autonomous weapons systems
Emotet returns, spreading via spam emails and stolen credentials
Emotet was originally developed as a banking Trojan, but was re-written to work as a malware loader
Massive ticket fraud scheme targeting Groupon and Ticketmaster uncovered with discovery of unsecured database
Unsecured database containing 17 million email addresses was found to be part of fraud targeting Groupon, Ticketmaster and other online ticket vendors
NetCAT side-channel flaw affecting Intel server CPUs could enable attackers to sniff sensitive network data
The weakness affects all Intel chips supporting the RDMA and DDIO features
Warning over Win32/StealthFalcon malware that uses Windows update system to steal data
The BITS system is used by Microsoft to send Windows updates to its users and is generally ignored by firewalls
Critical vulnerabilities in Telestar IoT radio devices could enable attackers to remotely capture systems
Hackers can also transmit audio as commands and force a play stream using the security bugs
Apple criticises Google for creating 'false impression' about the scale of iPhone hack
Apple claims that the attack on iPhones was not "a broad-based exploit of iPhones" as described by Google Project Zero
Google Project Zero discovers malicious websites that have been hacking iPhones for at least two years
Successful attacks enabled hackers to access passwords, messages and photos from iPhones and iPads
Google patches high-severity Chrome browser engine security flaw
The flaw could enable attackers to carry out remote code-execution or denial-of-service attacks
Apple patches security flaw that allowed iPhone jailbreak
The bug was fixed in iOS 12.3 but accidentally unpatched with the release of iOS 12.4
Russian hacking group Silence APT now aggressively targeting banks across Asia-Pacific
Financial damage linked to Silence APT has increased about five times over the past year
Vulnerabilities in Google Nest Cam IQ Indoor camera could allow attackers to take over a device
Denial of service, code execution and information disclosure bugs found in Google's Nest Cam IQ indoor camera system
US Cyber Command releases malware samples linked to North Korean hackers
One sample appears to be the same piece of malware which the US agencies warned about in May
Serious security flaws discovered in six widely used enterprise printers
Some of the security flaws date back 30-40 years - but probably didn't matter in pre-internet days
High-severity Windows security flaw enables attackers to hijack any application
Bug affects all versions of Microsoft Windows, back from Windows XP to Windows 10
Valve updates Steam over escalation of privilege security flaw - but accused of ignoring other vulnerabilities
Gaping holes still exist in popular Steam app used by more than 90 million PC users every day, warn security researchers
Most read
