Security News

US-CERT issues alert for Russian attacks targeting IoT devices
2018-04-19 10:25

Attorney and former CIA case officer Jack Rice explains how foreign actors could attack critical infrastructure, and how US intelligence agencies deploy a proportional response to cyber attacks.

Free Qualys services give orgs visibility of their digital certs and cloud assets
2018-04-16 19:20

Qualys announced two new free groundbreaking services: CertView and CloudView. Harnessing the power and scalability of the Qualys Cloud Platform, Qualys CertView and CloudView enable organizations...

Shared Accounts Increasingly Problematic for Critical Infrastructure: ICS-CERT
2018-01-16 09:34

Assessments conducted last year by the U.S. Department of Homeland Security’s Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) showed that boundary protection remains the...

Windows 10 Security Feature Broken, CERT/CC Warns
2017-11-21 13:33

Entropy Alert: Non-Random ASLR Leaves Systems Open To Buffer Overflow AttacksRecent versions of Windows have a security problem: They're not random enough, CERT/CC warns. The problem centers on...

Windows 10 Security Feature Broken, US-CERT Warns
2017-11-21 13:03

Entropy Alert: Non-Random ASLR Leaves Systems Open To Buffer Overflow AttacksRecent versions of Windows have a security problem: They're not random enough, US-CERT warns. The problem centers on...

US-CERT Warns of ASLR Implementation Flaw In Windows
2017-11-20 22:30

US-CERT is warning of a vulnerability in Microsoft’s implementation of Address Space Layout Randomization that affects Windows 8, Windows 8.1 and Windows 10.

US-CERT: North Korean Hackers Targeting Three Sectors
2017-11-15 19:03

Malware Takes Aim at Financial Services, Aerospace and Telecommunications IndustriesSince last year, North Korean hackers have been targeting businesses in the financial services, aerospace and...

US-CERT Warns of Crypto Bugs in IEEE Standard
2017-11-06 18:15

Weak cryptography in the IEEE P1735 electronics standard allow attackers to recover valuable intellectual property in plaintext from SoCs and integrated circuits.

Don't Delay: Replace Symantec TLS/SSL Certs Now
2017-09-12 16:33

Google Will Slowly Start Pulling the Rug From Under Symantec's Digital CertificatesA major operation to cleanse websites of digital certificates created under questionable circumstances is...