Threats, Cyberattacks & Vulnerabilities

Cryptojacking: How to navigate the bitcoin mining threat

Due to the rising value of bitcoin and other cryptocurrency, hackers have started to use cryptojacking to mine bitcoin. Learn what this means for end users with expert Nick Lewis. Continue Reading

By

• Nick Lewis

Devil's Ivy vulnerability: How does it put IoT devices at risk?

A gSOAP flaw was found in an Axis Communications security camera and branded the Devil's Ivy vulnerability. Learn how it threatens IoT devices with expert Nick Lewis. Continue Reading

By

• Nick Lewis

Intel Spectre vulnerability memo raises questions of OEM disclosures

Intel first learned of the Spectre vulnerabilities on June 1, but a confidential document shows the chipmaker didn't inform OEM partners until almost six months later. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

Blizzard security flaw should put game developers on notice

A newly-discovered Blizzard security bug, which affected all of the company's popular PC games including Overwatch, should serve as a warning for the video game industry. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

Electron framework flaw puts popular desktop apps at risk

The Electron framework -- used to develop desktop apps using web code -- included a remote code execution flaw that was passed on to popular apps like Slack. Continue Reading

By

• Michael Heller, TechTarget

How are middleboxes affecting the TLS 1.3 release date?

Despite fixing important security problems, the official TLS 1.3 release date keeps getting pushed back, in part due to failures in middlebox implementations. Continue Reading

By

• Loganaden Velvindron, CyberStorm.mu

Gemalto Sentinel flaws could lead to ICS attacks

Security researchers found 14 vulnerabilities in Gemalto Sentinel hardware tokens, which could allow dangerous ICS attacks, including full-system takeover. Continue Reading

By

• Michael Heller, TechTarget

Intel Meltdown patches pulled with little explanation

Intel claims it has determined why the Spectre and Meltdown patches caused issues on some chips. The vendor is working on a fix and suggests users don't patch for now. Continue Reading

By

• Michael Heller, TechTarget

Trisis ICS malware was publicly available after attack

The Trisis ICS malware used in a cyberattack on an oil and gas company in Saudi Arabia in December has been publicly available for weeks after being copied by unknown actors. Continue Reading

By

• Michael Heller, TechTarget

What do Dnsmasq vulnerabilities mean for Android users?

Researchers found several Dnsmasq vulnerabilities that affect Google's Android operating system. Matt Pascucci explains how these flaws can be exploited by threat actors. Continue Reading

By

• Matthew Pascucci

The strange case of the 'HP backdoor' in Lenovo switches

Lenovo's discovery of an authentication bypass, literally titled "HP backdoor," within its networking switches brings unsettling implications for the IT industry. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

Confused deputy: How did the vulnerability affect Slack?

A major SAML vulnerability was found in Slack that granted expired login credentials permission into the system. Matt Pascucci explains how this 'confused deputy' problem was handled. Continue Reading

By

• Matthew Pascucci

CIA attributes NotPetya attacks to Russian spy agency

The CIA reportedly concluded that Russia's foreign intelligence agency created and was responsible for the NotPetya attacks against Ukraine in June. Continue Reading

By

• Michael Heller, TechTarget

Intel Meltdown patch causes issues with Broadwell and Haswell

Customers reported the firmware Intel Meltdown patch caused reboot issues on Broadwell and Haswell chipsets, leading to a patch review by Intel. Continue Reading

By

• Michael Heller, TechTarget

AMD backtracks on Spectre vulnerabilities, plans microcode updates

AMD initially believed the Spectre vulnerabilities posed "near zero risk" to its chip, but the company this week reversed course and is planning microcode updates for its products. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

Fancy Bears hackers target International Olympic Committee

News roundup: The hacking group called Fancy Bears claims to have hacked the Olympics again. Plus, a former NSA contractor pleads guilty to stealing government data, and more. Continue Reading

By

• Madelyn Bacon, TechTarget

What went wrong with the Dirty COW vulnerability patch?

A patch was issued for the Dirty COW vulnerability, but researchers later discovered problems with the patch. Expert Judith Myerson explains what went wrong. Continue Reading

By

• Judith Myerson

Risk & Repeat: Meltdown and Spectre vulnerabilities shake industry

In this week's Risk & Repeat podcast, SearchSecurity editors discuss the discovery of the Meltdown and Spectre vulnerabilities and their effect on information security. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

How can a BGP vulnerability in Cisco products be fixed?

A BGP vulnerability in some Cisco products enabled denial-of-service attacks. Expert Judith Myerson explains the vulnerability and how Cisco fixed the problem. Continue Reading

By

• Judith Myerson

Unknown apps: How does Android Oreo control installation?

Android Oreo replaced the allow unknown sources setting with a new feature that enables users to selectively install unknown apps. Kevin Beaver explains what this change means. Continue Reading

By

• Kevin Beaver, Principle Logic, LLC

The ROCA vulnerability: How it works and what to do about it

The ROCA vulnerability is a serious flaw in cryptographic keys. Expert Michael Cobb explains what the flaw is, how it works and what can be done to lessen the risk to enterprises. Continue Reading

By

• Michael Cobb

IOHIDeous is a macOS zero-day for the new year

A newly discovered macOS zero-day flaw, called IOHIDeous, affects all versions of Apple's desktop operating system and can allow for full-system compromise. Continue Reading

By

• Michael Heller, TechTarget

Broadpwn flaw: How does the new iOS exploit compare?

An iOS exploit similar to the Broadpwn flaw was recently developed by a researcher at Google's Project Zero. Expert Kevin Beaver explains what the exploit is and how it works. Continue Reading

By

• Kevin Beaver, Principle Logic, LLC

Cryptocurrency exchanges increasingly targeted by cyberattacks

News roundup: Cryptocurrency exchanges are folding because of targeted cyberattacks. Plus, five hackers were arrested in connection with international ransomware attacks, and more. Continue Reading

By

• Madelyn Bacon, TechTarget

Risk & Repeat: Cryptojacking looms amid the bitcoin boom

In this week's Risk & Repeat podcast, SearchSecurity editors discuss the rising threat of cryptojacking and how hackers can steal computing power from unsuspecting users. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

QakBot malware: How did it trigger Microsoft AD lockouts?

QakBot malware triggered hundreds of thousands of Microsoft Active Directory account lockouts. Discover the malware's target and how these attacks are being carried out. Continue Reading

By

• Nick Lewis

Zusy malware: Are your PowerPoint files at risk?

Several spam campaigns were discovered after a malicious PowerPoint file was exposed. Learn how Zusy malware is delivered upon hovering over hypertext and how files can be saved. Continue Reading

By

• Nick Lewis

Triton framework used in industrial control attacks

Security researchers discovered new ICS attacks using the Triton framework that may have been nation-state-sponsored and intended to cause real-world damage. Continue Reading

By

• Michael Heller, TechTarget

Mirai creators and operators plead guilty to federal charges

The Department of Justice announced guilty pleas from the three Mirai creators and operators behind the massive worldwide botnet DDoS attacks in 2016. Continue Reading

By

• Michael Heller, TechTarget

How can a local file inclusion attack be stopped?

A botnet-based local file inclusion attack targeted IBM X-Force customers. Expert Judith Myerson explains how these attacks work and how enterprises can defend against them. Continue Reading

By

• Judith Myerson

1.4 billion stolen credentials found on dark web

A massive repository containing more than 1.4 billion stolen credentials was found on the dark web with special features for malicious actors. Continue Reading

By

• Michael Heller, TechTarget

Hacker behind Uber data breach was paid off through bug bounty

News roundup: The man responsible for the 2016 Uber data breach is a 20-year-old from Florida. Plus, Ethiopia reportedly targeted dissidents with Israeli spyware, and more. Continue Reading

By

• Madelyn Bacon, TechTarget

LDAP injection: How was it exploited in a Joomla attack?

After eight years, Joomla discovered an LDAP vulnerability that could be exploited by threat actors. Learn how the attack works from expert Matt Pascucci. Continue Reading

By

• Matthew Pascucci

Army cyber officer hiring to build the future of warfare

A new initiative plans Army cyber officer hiring over the course of five years, but experts are skeptical it can attract the best candidates away from the private sector. Continue Reading

By

• Michael Heller, TechTarget

BlueBorne vulnerabilities: Are your Bluetooth devices safe?

Armis Labs discovered a series of vulnerabilities that enables remote connection to Bluetooth devices. Learn more about the BlueBorne vulnerabilities with expert Matt Pascucci. Continue Reading

By

• Matthew Pascucci

Keyboard data leak exposes millions of personal records

A keyboard data leak by mobile developer Ai.type exposed millions of personal records through misconfigured MongoDB database settings. Continue Reading

By

• Michael Heller, TechTarget

Apple High Sierra patch undone by macOS update

Apple released a High Sierra patch to fix a serious macOS authentication vulnerability discovered last week, but users could accidentally undo the patch with a routine OS update. Continue Reading

By

• Michael Heller, TechTarget

How does the GhostHook attack bypass Microsoft PatchGuard?

A technique known as the GhostHook attack can get around PatchGuard, but Microsoft hasn't patched the flaw. Expert Michael Cobb explains why, as well as how the attack works. Continue Reading

By

• Michael Cobb

Serious macOS flaw in High Sierra allows attackers to log in as root

An Apple macOS flaw in High Sierra could allow an attacker to bypass any authentication dialog, including signing in to a system as a full root user. Continue Reading

By

• Michael Heller, TechTarget

Uber breach affected 57 million users, covered up for a year

A 2016 Uber breach affecting data for 57 million users was covered up by the company, including a $100,000 payment to the attackers to keep the incident quiet. Continue Reading

By

• Michael Heller, TechTarget

Google bug bounty pays $100,000 for Chrome OS exploit

An anonymous security researcher has once again earned the top Google bug bounty prize in the Chrome Reward Program for a Chrome OS exploit chain. Continue Reading

By

• Michael Heller, TechTarget

Kaspersky sheds more light on Equation Group malware detection

A lengthy Kaspersky report offers more insight into how the antivirus company discovered Equation Group malware and came to possess classified U.S. government data. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

Federal vulnerability review under new VEP still has questions

Experts are still unsure about the Vulnerabilities Equities Process, but admit the new VEP Charter could be a good step toward improving federal vulnerability review. Continue Reading

By

• Michael Heller, TechTarget

What QNAP vulnerabilities affect NAS storage device security?

QNAP vulnerabilities in NAS enabled attackers to control devices. Expert Judith Myerson explains each of the QNAP NAS vulnerabilities and their fixes. Continue Reading

By

• Judith Myerson

New VEP Charter promises vulnerability transparency

The White House wants a more open Vulnerabilities Equities Process and has unveiled a new VEP Charter in order to promote transparency in bug reviews. Continue Reading

By

• Michael Heller, TechTarget

AVGater abuses antivirus software for local system takeover

A new proof-of-concept exploit, called AVGater, has found a way to abuse antivirus quarantines to attack systems and gain full control. Continue Reading

By

• Michael Heller, TechTarget

FBI hacking may have crossed international borders

New court documents indicate an FBI hacking operation may have crossed international borders and infected systems in Russia, China and Iran. Continue Reading

By

• Michael Heller, TechTarget

SAVE Act attempts to bolster election security

Two senators introduced a bipartisan election security bill called the SAVE Act, which aims to improve voting infrastructure and harden state systems against attack. Continue Reading

By

• Michael Heller, TechTarget

The Equation Group malware mystery: Kaspersky offers an explanation

Kaspersky Lab finally explained how it came to possess Equation Group malware, but does the company's latest statement answer enough questions about the ongoing drama? Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

DUHK attack puts random number generators at risk

News roundup: Researchers find DUHK attacks can get around encrypted communications. Plus, FBI Director Wray criticizes mobile device encryption, and more. Continue Reading

By

• Madelyn Bacon, TechTarget

Warning for Equifax security issues came months before breach

A security researcher reportedly disclosed a number of Equifax security issues to the company months before the major data breach, and none of the problems were fixed. Continue Reading

By

• Michael Heller, TechTarget

EternalRocks malware: What exploits are in it?

When NSA cyberweapons went public, attackers bundled them into the EternalRocks malware. Nick Lewis takes a closer look at this new threat and explains what's lurking inside. Continue Reading

By

• Nick Lewis

NSA cyberweapons report follows Kaspersky transparency plan

A Kaspersky transparency initiative and a full code review of its products are on the way, and a new Kaspersky statement explained how NSA cyberweapons were uploaded to its servers. Continue Reading

By

• Michael Heller, TechTarget

Samsung S8 iris scanner: How was it bypassed?

Hackers bypassed the Samsung S8 iris scanner, which could spell trouble for biometric authentication. Expert Nick Lewis explains how it happened and how to stay protected. Continue Reading

By

• Nick Lewis

HP keylogger: How did it get there and how can it be removed?

A keylogging flaw found its way into dozens of Hewlett Packard laptops. Nick Lewis explains how the HP keylogger works and what can be done about it. Continue Reading

By

• Nick Lewis

Risk & Repeat: DEFCON tackles voting machine security

In this week's Risk & Repeat podcast, SearchSecurity editors discuss DEFCON's efforts to improve voting machine security in the wake of hacking threats during the 2016 election. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

KRACK WPA2 flaw might be more hype than risk

Researchers discover a WPA2 vulnerability and brand it KRACK, but some experts say the early reports overstate the risk of the flaw and downplay the difficulty of an exploit. Continue Reading

By

• Michael Heller, TechTarget

Analyzing the flaws of Adobe's HTTP security headers

A recent patching issue with Flash drew attention to shortcomings with Adobe's HTTP security headers. Judith Myerson discusses the importance of HTTP header security. Continue Reading

By

• Judith Myerson

Equifax website hack blamed on drive-by download attack

Security researchers find drive-by download attacks affecting both Equifax and TransUnion, but Equifax claims systems were not compromised in the website hack. Continue Reading

By

• Michael Heller, TechTarget

DEFCON hopes voting machine hacking can secure systems

The first official report on voting machine hacking from DEFCON suggests the need for pen testing, basic security guidelines and cooperation from local and federal governments. Continue Reading

By

• Michael Heller, TechTarget

How can hackers use subtitle files to control endpoint devices?

New media player vulnerabilities have been exposed that enable hackers to use subtitle files to control devices. Expert Judith Myerson explains how this happens. Continue Reading

By

• Judith Myerson

Foxit Reader vulnerabilities: What can be done to mitigate them?

Two critical, zero-day Foxit Reader vulnerabilities haven't been patched and pose a threat to enterprises. Judith Myerson explains the vulnerabilities and how to mitigate them. Continue Reading

By

• Judith Myerson

Windows 10 patching could make older systems vulnerable

Microsoft's practice of automatic Windows 10 patching could be uncovering vulnerabilities in older systems that can be exploited by attackers, Google researchers said. Continue Reading

By

• Michael Heller, TechTarget

How does an Amazon Echo vulnerability enable attackers to eavesdrop?

Hackers could take advantage of a physical Amazon Echo vulnerability to turn the Echo into a listening device. Judith Myerson explains how this works and what can be done about it. Continue Reading

By

• Judith Myerson

NSA breach leads to theft of government spy software

An NSA contractor became the target of a cyberattack after storing agency spying software on a personal device, and this NSA breach has caused a rise in fears regarding Russia. Continue Reading

By

• Michael Heller, TechTarget

How does the Ursnif Trojan variant exploit mouse movements?

A new version of the Ursnif Trojan uses mouse movements to bypass security efforts by beating sandbox detection. Expert Matthew Pascucci explains how this technique works. Continue Reading

By

• Matthew Pascucci

Equifax breach impact expands, blame game continues

The Equifax breach impact expanded and the company's former CEO answered questions in a congressional hearing, but experts were not satisfied by the answers. Continue Reading

By

• Michael Heller, TechTarget

Yahoo data breach found to affect all 3 billion users

Newly uncovered information indicated that all 3 billion users were affected by the 2013 Yahoo data breach, but Oath claimed passwords and credit card info was safe. Continue Reading

By

• Michael Heller, TechTarget

FBI's Freese: It's time to stop blaming hacking victims

The FBI's Don Freese spoke at the (ISC)2 Security Congress this week about the need to end the practice of blaming hacking victims. But will infosec professionals listen? Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

New WordPress malware: What to do about WP-Base-SEO

A new type of WordPress malware, WP-Base-SEO, disguises itself as an SEO plug-in that opens backdoors. Nick Lewis explains how it works and how to avoid it. Continue Reading

By

• Nick Lewis

Ransomware attackers using more sophisticated techniques

At the (ISC)2 Security Congress, infosec professionals warned of sophisticated ransomware attackers that are using more advanced techniques to encrypt entire networks. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

How does a Magento Community Edition flaw allow remote attacks?

As the Magento Community Edition suffers a new zero-day vulnerability, expert Nick Lewis explains how it's being exploited and how to mitigate the cross-site request forgery flaw. Continue Reading

By

• Nick Lewis

Users plagued by iOS app security issues, according to new research

News roundup: Researchers uncovered a large number of iOS app security risks. Plus, Viacom exposed its critical data through a misconfigured AWS S3 bucket, and more. Continue Reading

By

• Madelyn Bacon, TechTarget

Undisclosed SEC breach may have led to illegal stock trades

The U.S. Securities and Exchange Commission admitted a 2016 breach that was previously undisclosed may have enabled threat actors to engage in illegal stock trades. Continue Reading

By

• Michael Heller, TechTarget

How does BrickerBot threaten enterprise IoT devices?

BrickerBot is similar to other IoT malware like Mirai, Hajime and others. Expert Judith Myerson explains what makes BrickerBot different, and what can be done to defend against it. Continue Reading

By

• Judith Myerson

How attackers can intercept iCloud Keychain data

A verification flaw in the synchronization service of iCloud Keychain enables attackers to intercept the data it transfers. Expert Frank Siemons explains what to do about it. Continue Reading

By

• Frank Siemons, RedSec

BlueBorne Bluetooth vulnerabilities affect billions of devices

A set of eight Bluetooth vulnerabilities, branded together as BlueBorne, affect billions of devices and could be one of the most dangerous issues, according to experts. Continue Reading

By

• Michael Heller, TechTarget

The HTML5 vulnerabilities enterprises need to know

Adobe Flash's end of life is coming, but there are some HTML5 vulnerabilities enterprises should be aware of before making the switch. Expert Judith Myerson outlines the risks. Continue Reading

By

• Judith Myerson

Equifax breach response deemed insufficient in multiple ways

Experts criticized the Equifax breach response as insufficient, given the size and scope of the data loss, and they said the company was likely not prepared for such an incident. Continue Reading

By

• Michael Heller, TechTarget

How is Pegasus malware different on Android than on iOS?

Pegasus malware used to only target iOS devices, but a variant called Chrysaor now goes after Android devices, too. Expert Michael Cobb explains what users need to know about it. Continue Reading

By

• Michael Cobb

Six new vulnerabilities in Android bootloaders uncovered

News roundup: Researchers used the new BootStomp tool to uncover six vulnerabilities in Android bootloaders. Plus, a new wave of AWS S3 bucket data leaks strikes and more. Continue Reading

By

• Madelyn Bacon, TechTarget

Apache Struts vulnerability affects versions since 2008

A researcher discovered a remotely exploitable Apache Struts vulnerability being actively exploited in the wild. A patch was released, and users were urged to update software immediately. Continue Reading

By

• Michael Heller, TechTarget

Interception threatens TLS security; now what?

As global cyberattacks have exploded in recent months, the speed of infection is causing damage, not only to targeted industries and nation states, but to corporate valuations. In June, FedEx warned that the Petya cyberattack, which disrupted operations at its TNT Express subsidiary, may have "material impact" on the company's 2017 financial performance. Merck & Co. Inc., another victim of the cyberattack, issued a similar warning. A Trojan that morphed into a worm, Petya -- sometimes called NotPetya -- brought increased attention to the lack of security fundamentals practiced at major companies.

The majority of these threats enter networks through malware delivered via the internet. However, as the growth of HTTPS deployment continues, some companies are increasingly using Transport Layer Security (TLS) interception by middleboxes to maintain visibility into TLS security and malicious software. Researchers from top universities and technology companies, including Google, Mozilla and Cloudflare, published an HTTPS interception study in April that offered startling statistics on TLS security.

In this issue of Information Security magazine, we look at how worms play a role in advanced persistent threats and the ongoing issues related to HTTPS inspection and TLS security.

 Continue Reading

Kaspersky-Russian ties still unclear, despite FBI push

The specter of Kaspersky-Russian ties has reportedly led to an FBI campaign urging private organizations to drop Kaspersky Lab products; experts urge the FBI to share more evidence. Continue Reading

By

• Michael Heller, TechTarget

U.S. government cybersecurity is a mess, according to officials

News roundup: John McCain, NIAC and others called out the administration for not doing enough on U.S. government cybersecurity. Plus, the Ropemaker exploit alters emails, and more. Continue Reading

By

• Madelyn Bacon, TechTarget

Cryptography attacks: The ABCs of ciphertext exploits

Encryption is used to protect data from peeping eyes, making cryptographic systems an attractive target for attackers. Here are 18 types of cryptography attacks to watch out for. Continue Reading

By

• (ISC) 2

ATMitch malware: Can fileless ATM malware be stopped?

How was the ATMitch malware able to loot cash machines, then delete itself? Expert Nick Lewis explains how the fileless malware works and how it spreads. Continue Reading

By

• Nick Lewis

Destruction of service: How ransomware attacks have changed

New ransomware variants have introduced another threat to enterprises. Rob Shapland explains what destruction of service attacks are and how organizations should prepare for them. Continue Reading

By

• Rob Shapland

iPhone Secure Enclave firmware encryption key leaked

Experts and Apple say despite the leak of the iPhone Secure Enclave Processor encryption key that can be used to decrypt firmware code, user data and biometric information are still safe. Continue Reading

By

• Michael Heller, TechTarget

How does the MajikPOS malware evade detection?

A new POS malware downloads a RAM scraper to avoid detection. Expert Nick Lewis explains the tricks MajikPOS uses to target retail terminals and how to defend against it. Continue Reading

By

• Nick Lewis

Valerie Plame: U.S. government cyberdefense must be improved

Former CIA officer Valerie Plame discusses why America's cyberdefense is lagging behind -- and what the government and private sector should do to reverse the trend. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

Why is the patched Apache Struts vulnerability still being exploited?

An Apache Struts vulnerability is still being exploited, even though it has already been patched. Expert Nick Lewis explains why the Struts platform still carries risk for users. Continue Reading

By

• Nick Lewis

Offensive cyberweapons from enemies may be re-engineered

The U.S. Defense Intelligence Agency wants to isolate, study, customize and re-engineer malware from adversaries to be used as its own offensive cyberweapons. Continue Reading

By

• Michael Heller, TechTarget

NotPetya ransomware impact costs Maersk hundreds of millions

Danish shipping giant A.P. Moller-Maersk said the NotPetya ransomware attacks severely damaged business processes and the impact has been estimated at as much as $300 million in lost revenue. Continue Reading

By

• Michael Heller, TechTarget

How does CrashOverride malware threaten industrial control systems?

CrashOverride malware targets industrial control systems and can wreak havoc. Expert Judith Myerson explains the capabilities of the malware and what to do to stop it. Continue Reading

By

• Judith Myerson

Microsoft antivirus policy changes under Kaspersky pressure

Microsoft antivirus policy changes for Windows 10 Fall Creators Update in order to avoid further action in an antitrust case brought by Kaspersky. Continue Reading

By

• Michael Heller, TechTarget

U.S. attorney: Gathering cybercrime evidence can be difficult

Assistant U.S. attorney says jurors and courts are getting smarter about cybercrime evidence, although digital cases overall may be getting more difficult to prosecute. Continue Reading

By

• Michael Heller, TechTarget

Risk & Repeat: Voting machine hacking brings good and bad news

In this week's Risk & Repeat podcast, SearchSecurity editors look back at DEFCON 2017's voting machine hacking and what it could mean for the future of U.S. election security. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

FBI: Cyber investigations no different from real world

Despite a loud group claiming the burden of proof is harder to meet with digital evidence, an agent says FBI cyber investigations are not much different from traditional cases. Continue Reading

By

• Michael Heller, TechTarget

How did a Moodle security vulnerability enable remote code execution?

A series of logic flaws in Moodle enabled attackers to remotely execute code on servers. Expert Michael Cobb explains how the Moodle security vulnerability can be exploited. Continue Reading

By

• Michael Cobb