Lucian Constantin
CSO Senior Writer
Lucian Constantin writes about information security, privacy, and data protection for CSO.
Secrets of latest Smominru botnet variant revealed in new attack
Researchers gained access to a Smominru command-and-control server to get details on compromised devices and scope of the attack.
What is PSD2? And how it will impact the payments processing industry
The EU’s revised Payment Services Directive (PSD2), which include multifactor authentication for online European payment card transactions, will have a ripple effect on the payments processing industry in the U.S. and elsewhere.
New NetCAT CPU side-channel vulnerability exploitable over the network
NetCAT takes advantage of Intel DDIO technology to remotely execute keystroke timing attacks.
SMS-based provisioning messages enable advanced phishing on Android phones
Attackers can use this vulnerability to send highly credible phishing messages. Victims' internet traffic is then routed through the attacker's proxy.
Insecure virtual USB feature in Supermicro BMCs exposes servers to attack
Security researchers have found a way to attach virtual USB devices remotely to Supermicro servers, including over the internet, by abusing a feature in their baseband management controller software.
What is Wireguard? Secure, simple VPN still in development
The Wireguard VPN offers better performance and a simpler, effective approach to cryptography. Is it ready for the enterprise?
More critical Remote Desktop flaws expose Windows systems to hacking
Microsoft finds and fixes multiple RDS and RDP vulnerabilities in Windows, but new research on BlueKeep patch rates suggests many machines could remain exposed.
ICS security: Popular building management system vulnerable to takeover
Remotely exploitable vulnerability in internet-connected devices gives attackers a means to cause disruption and damage in a wide range of industries.
Popular Avaya enterprise VoIP phones are vulnerable to hacking
Attackers can use the vulnerability to gain complete control of the phone. It underscores the risks of using old open-source code in IoT devices.
New Spectre-like CPU vulnerability bypasses existing defenses
The SWAPGS vulnerability can allow attackers to access contents of kernel memory addresses. Microsoft and Intel have coordinated on a mitigation.
Critical VxWorks flaws expose millions of devices to hacking
Researchers have found 11 serious vulnerabilities in VxWorks, the world's most popular real-time operating system (RTOS) that powers over 2 billion devices including enterprise network firewalls and routers, industrial controllers and...
-
Sponsor Article
Sponsored -
White Paper
