Security News > 2016 > December

Intentional or not, insider threats are real (Help Net Security)
2016-12-05 13:00

Despite the perception that hackers are a company’s biggest cybersecurity threat, insiders, including careless or naive employees, are now viewed as an equally important problem, according to a...

Most email authentication implementations fail (Help Net Security)
2016-12-05 12:45

Most of the world’s largest businesses fail at attempts to use open industry standards to control which email is sent using their names. Three quarters of large businesses attempting...

50% of businesses not leveraging public cloud (Help Net Security)
2016-12-05 12:30

While more than 50 percent of respondents are not currently leveraging public cloud, 80 percent plan on migrating more within the next year, according to TriCore Solutions. As new streams of data...

Guessing Credit Card Security Details (Schneier on Security)
2016-12-05 12:25

Researchers have found that they can guess various credit-card-number security details by spreading their guesses around multiple websites so as not to trigger any alarms. From a news article:...

Week in review: Sextortion, Firefox 0-day, and next level red teaming (Help Net Security)
2016-12-04 13:00

Here’s an overview of some of last week’s most interesting news, podcasts and articles: McAfee Labs predicts 14 security developments for 2017 Ransomware attacks will decrease in volume and...

A 50-Foot Squid Has Not been Found in New Zealand (Schneier on Security)
2016-12-03 00:18

A 50-foot squid has not been found in New Zealand. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered....

Have Tesco Bank attackers guessed victims’ payment card details? (Help Net Security)
2016-12-02 21:05

A group of researchers from Newcastle University have discovered a practical and easy way for attackers to quickly guess individuals’ Visa payment card info needed to perform fraudulent...

Google Fixes 12 High-Severity Flaws In Chrome Browser (Threatpost)
2016-12-02 16:45

Chrome 55.0.2883.75 for Windows, Mac, and Linux was released Thursday and patched 36 vulnerabilities, including 12 high-severity flaws eligible for bounties.

AirDroid app opens millions of Android users to device compromise (Help Net Security)
2016-12-02 15:28

Tens of millions of users of AirDroid, a remote management tool for Android, are vulnerable to man-in-the-middle attacks that could lead to data theft and their devices being compromised through...

65% of social engineering attacks compromised employee credentials (Help Net Security)
2016-12-02 14:00

Social engineering is having a notable impact on organizations across a range of industrial sectors in the US. In fact, 60 percent of surveyed security leaders say their organizations were or may...