Subterms
Last month, a cybersecurity firm discovered the first-ever Android malware that came with the capability to steal the 2FA (two-factor authentication) codes generated by the Google Authenticator app. The malware, discovered by researchers from ThreatFabric, was named Cerberus, and its 2FA OTP code-stealing feature was still under development, yet to have been detected in a […] More
[embedded content] On the same day that I saw Apple introduce Face ID at the Steve Jobs Theater in 2017, I headed north to a wireless trade show, where a vendor was showing off a competitive version of the technology for licensing. Today, a few Android vendors have implemented Face ID-style recognition, and Google applied […] More
AT&T, Palo Alto Networks and Broadcom on Friday announced a framework for a virtual firewall, known as a Disaggregated Scalable Firewall (DSFW). According to AT&T, the DFSW architecture is designed to secure and protect global network traffic in the 5G era. The DSFW lets network operators deploy firewalls as software-based platforms rather than hardware appliances. […] More
Image: Andy Feliciotti In a press release today, the US Department of Justice charged a former Acting Inspector General for the US Department of Homeland Security (DHS) with the theft of proprietary software and confidential government databases. The indictment named Charles K. Edwards, a former DHS Acting Inspector General between 2011 to 2013, but also […] More
More than one billion Android devices around the world are no longer supported by security updates, leaving them potentially vulnerable to attack. Consumer watchdog Which? has calculated that two in five Android devices are no longer receiving vital security updates from Google, putting them at greater risk of malware or other security flaws. Android 10 […] More
Cyber criminals are aiming to take advantage of fears over coronavirus as a means of conducting phishing attacks and spreading malware, along with stealing login credentials and credit card details. Cybersecurity companies have identified a number of campaigns by hackers who are attempting to exploit concerns about the COVID-19 outbreak for their own criminal ends. […] More
A security researcher published yesterday details on Twitter about a zero-day vulnerability in a Zoho enterprise product. Cyber-security experts who have reviewed the vulnerability have told ZDNet that the zero-day could spell trouble for companies around the world, as it could be an entry point for ransomware gangs to infect corporate networks and ransom their […] More
Microsoft has detailed the tactics and techniques of some of the most costly ransomware in recent years, which aren’t automated but rather are manually controlled by human hands at a keyboard. It warned that some ransomware groups are now using the same skills as nation-state-backed hackers, and show an “extensive knowledge of systems administration and […] More
