Security News > 2019 > January

"Cobalt" Hackers Use Google App Engine in Recent Attacks
2019-01-25 17:36

Infamous "Cobalt" hacking group has been using Google App Engine for the delivery of malware through PDF decoy documents, Netskope’s security researchers say.  read more

Razy Malware Attacks Browser Extensions to Steal Cryptocurrency
2019-01-25 16:44

The malware targets victims in multiple, sneaky ways as they move around the web.

Hackers Using RDP Are Increasingly Using Network Tunneling to Bypass Protections
2019-01-25 16:21

Threat actors conducting Remote Desktop Protocol (RDP) attacks are increasingly using network tunneling and host-based port forwarding to bypass network protections, FireEye reports.  read more

Flaws Expose Phoenix Contact Industrial Switches to Attacks
2019-01-25 15:34

The latest firmware updates released by Phoenix Contact for its FL SWITCH industrial ethernet switches address a total of six vulnerabilities that can be exploited to obtain credentials for the...

Data Leak in Ghostscript Could Allow Command Execution
2019-01-25 15:19

Data leak vulnerabilities in Ghostscript could allow an attacker to take over a routine and even execute commands on systems, Google Project Zero researcher Tavis Ormandy has discovered.  read more

Roger Stone Arrested as Part of Mueller Investigation
2019-01-25 15:03

Trump Political Adviser Charged With Lying About WikiLeaks CommunicationsRoger Stone Jr., a longtime political adviser to President Donald Trump, has been arrested as part of Robert Mueller's...

UK-EU infosec data sharing may not be KO'd by Brexit, reckons ENISA bod
2019-01-25 14:52

Ops director talks to El Reg about continential cybersecurity contrivances Interview A senior EU cybersecurity official has said he is “optimistic” about information sharing between the UK and the...

7 bug bounty myths, busted
2019-01-25 14:32

Interest in bug bounty programs is exploding, as companies look to crowdsourcing to combat hackers. But several misconceptions remain.

Just keep slurping: HMRC adds two million taxpayers' voices to biometric database
2019-01-25 13:45

But thousands opting out in 'backlash', says privacy group HMRC's database of Brits' voiceprints has grown by 2 million since June – but campaign group Big Brother Watch has claimed success as...

CISSP Price Hike Dismays Certified Security Professionals
2019-01-25 13:44

(ISC)² has increased the annual fee for its CISSP certification for security professionals by 47% from $85 to $125. The new fee is fixed, whether the professional holds one or multiple (ISC)2...