Page 42 - Software Security News Today

Colonial Pipeline, which oversees more than 5,500 miles of pipeline that supplies fuel throughout the U.S. East Coast, confirmed Saturday that a ransomware attack

Attackers have co-opted the Hancitor malware downloader and recently used it to deliver Cuba ransomware as part of an email spam campaign for data exfiltration and

Colonial Pipeline, which oversees more than 5,500 miles of pipeline that supplies fuel throughout the U.S. East Coast, confirmed Saturday that a ransomware attack

US Physics Laboratory Exposed Documents, Credentials May 20, 2021 Compliance Compliance Twitter MICE single cavity test stand at Fermilab. (Photo: US Department of Energy via Wikipedia/CC) The Fermilab physics laboratory in the U.S. has tidied up its systems after security researchers found weaknesses exposing documents, proprietary applications, personal information, project details and credentials. Fermilab, which is part of the U.S. Department of Energy, is a world-famous particle accelera...

GovInfoSecurity Compliance Compliance Twitter Get Permission Security researchers have uncovered a flaw dubbed TsuNAME in DNS resolver software that can be used to carry out distributed denial-of-service attacks against authoritative DNS servers. Google and Cisco have resolved the issue in their DNS servers. Authoritative DNS servers are the final holder of the IP of a domain, responsible for providing details about specific websites to DNS servers, including information on domain names and I...

Get Permission The Cybersecurity and Infrastructure Security Agency has issued an alert providing more details on the threat posed by FiveHands ransomware attacks. The CISA alert, which follows one issued last week by FireEyes Mandiant research team, describes the ransomware gangs methods and offers risk mitigation tips. "Threat actors used publicly available penetration testing and exploitation tools, FiveHands ransomware and the SombRAT remote access Trojan, to steal information, obfuscate ...

Get Permission Researchers at Trend Micro have uncovered a new cryptocurrency stealer variant that uses a fileless approach in its global spam email distribution campaign to evade detection. The gang behind the malware, dubbed "Panda Stealer," starts with emails that appear to be business quote requests to entice recipients to open malicious Excel files, Trend Micro says. Researchers found that the malware, a modification of Collector Stealer, has targeted victims in the United States, Austral...

All Specs Samsung takes thin-and-light laptops to a whole new level with the Galaxy Book Pro 360. Available in either a 13-inch screen size or the 15-inch one were looking at here, this 2-in-1 convertible laptop is among the most “ultra” of the ultraportable laptop category. Samsung manages to fit a roomy Super AMOLED touch screen, a 360-degree hinge, an 11th Generation Intel Core i7 processor, and unique software features into a laptop that weighs just 3 pounds. We haven’t finished test...

As we reflect on the past 40 years of helping Mario fix one catastrophe after another, its worth considering how his example can help us understand a more intelligent approach to DevOps security. Companies have the tools to improve their culture of security by enabling DevOps teams to build it into their foundation — and defeat the Bowsers of today.  Prioritize Extra Lives Over Speed Runs Everyone loves a good speed run, and there is a certain satisfaction in recording a new personal best....

As we reflect on the past 40 years of helping Mario fix one catastrophe after another, its worth considering how his example can help us understand a more intelligent approach to DevOps security. Companies have the tools to improve their culture of security by enabling DevOps teams to build it into their foundation — and defeat the Bowsers of today.  Prioritize Extra Lives Over Speed Runs Everyone loves a good speed run, and there is a certain satisfaction in recording a new personal best....