DHS: Guidance for AI in critical infrastructure

January 27, 2020

Weekly Security News Roundup: GDPR Fines Imposed Total €114M Thus Far

3 min read - A survey found that regulators have thus far imposed 114 million euros in fines for a variety of GDPR infringements including data breaches. Learn what else happened last week in security news.

January 22, 2020

FTCODE Ransomware Adds Functionality for Stealing Credentials From Web Browsers, Email Clients

2 min read - Security researchers observed that FTCODE ransomware has added functionality for stealing users' credentials from web browsers and email clients.

January 22, 2020

EFS Ransomware Attacks Overcome Major Antivirus Tools in Proof-of-Concept Tests

2 min read - EFS ransomware attacks targeting Windows users could potentially overcome several major signature-based antivirus tools, researchers have discovered.

January 21, 2020

TrickBot Uses UAC Bypass to Quietly Infect Windows 10 Machines

2 min read - Security researchers observed that TrickBot has begun using a User Account Control (UAC) bypass to quietly infect machines running Windows 10 without displaying any prompts.

January 20, 2020

Weekly Security News Roundup: Nemty Ransomware Plans to Begin Leaking Victims’ Data

3 min read - Security researchers discovered Nemty ransomware's plans to create a website for the purpose of publishing its non-paying victims' data. Learn what else happened last week in security news.

January 16, 2020

Microsoft Patches CryptoAPI Flaw Following Discovery From NSA

2 min read - Microsoft used its first Patch Tuesday update of the new decade to address a critical vulnerability in its CryptoAPI library.

January 15, 2020

Ryuk Ransomware Waking Up Powered-Down Devices to Encrypt Them

2 min read - Security researchers observed the Ryuk ransomware using a special hardware feature to wake up powered-down devices in order to encrypt them.

January 15, 2020

Cable Haunt Leaves an Estimated 200 Million Modems Open to Potential Attacks

2 min read - An estimated 200 million modems or more may be vulnerable to an exploit dubbed Cable Haunt, which researchers said would give attackers complete control over their victims' devices.

January 14, 2020

Australian Bushfires Donation Website Compromised by Magecart Credit Card Skimming Attack

2 min read - A website set up to collect donations for the Australian bushfires suffered a Magecart credit card skimming attack.

January 14, 2020

Microsoft Sway Domains Used in Phishing Campaigns to Create Bogus Landing Pages

2 min read - A phishing technique that makes use of Microsoft Sway could attack organizations even if they don't use the tool, security researchers warn.