WordPress Sites at Risk From PHP Code Execution
New attacks against unfinished installations of WordPress aim to give attackers admin access and the opportunity to run PHP code.
New Malware Gets Stronger by Using Real Apps in Banking Attacks
New malware is infiltrating bona fide apps, making banking Trojans harder to detect. Fortunately, it can be shut down if it is detected in time.
Let’s Get Physical: Malicious Script Magecart Expands Impact With Fraudulent Mail Forwarding
Malicious script Magecart is still going strong, allowing threat actors to hire U.S. mules to ship fraudulently purchased goods.
Did Your Developer Leave a Website Backdoor?
A Dutch developer stole e-commerce customers' login credentials using a website backdoor and admin access that former employers had neglected to revoke.
Anti-ROP: A Moving Target Defense
IBM Research — Haifa recently developed a solution that acts like a moving target, randomizing files to safeguard against ROP attacks.
The Increasing Dangers of Code Hooking
Cybercriminals use code hooking to intercept OS function calls to alter or augment their behavior. The technique is becoming more popular and dangerous.
Pastejacking: The Clipboard Copy Concern?
A new exploit called pastejacking results in victims unwittingly infecting their own machines thanks to malicious code hidden in seemingly normal text.
Cross-Site Scripting Attacks Pose Ongoing Threat
Cross-site scripting (XSS) attacks exploit Web design tools to sneak malicious scripts onto users' browsers. Preventive measures can minimize the risk.
Rising Use of Malicious Java Code for Enterprise Infiltration
Fifty percent of the exploits observed by Trusteer and IBM X-Force Research in December 2013 targeted Java vulnerabilities.
Half a Billion Reasons Why Data Security Still Faces Major Challenges
Latest security trends—from malware delivery to mobile device risks—based on data and ongoing research from the IBM X-Force Research team on today’s security threat landscape. Wherever you go, attackers will follow as security attacks are...