Security News

Neustar's annual DDoS attack report says businesses can lose $2.5M on average detecting and mitigating DDoS attacks.

A new crawler from Shodan and Recorded Future called Malware Hunter seeks out command and control servers managing endpoints infected with remote access Trojans and other malware.

Google pushed out its monthly Android patches Monday, addressing 17 critical vulnerabilities, six of which are tied to the Android Mediaserver component and four addressing problems with Qualcomm chipsets.

Fuze addressed two issues that publicly exposed recordings of private business meetings made over the collaboration platform.

Intel warns business PC customers of a critical vulnerability found in its Active Management Technology that allows for escalation of privilege attacks.

Apple takes countermeasures to neutralize OSX/Dok HTTPS-snooping malware by revoking a hijacked certificate updating its XProtect built-in anti-malware software.

Dan Geer's Source Boston keynote included a declaration that cybersecurity and humanity's future are forever conjoined.

Yahoo has patched an account takeover vulnerability on its Flickr image-hosting service that earned an independent security researcher a $7,000 bounty.

The CIA is planting web beacons inside Microsoft Word documents to track whistleblowers, journalists and informants, according to WikiLeaks.

Mike Mimoso and Chris Brook recap this year's SOURCE Boston Conference and discuss the week in news, including the long term implications of the NSA's DoublePulsar exploit, and the HipChat breach.