News
![Insider Pro | Computerworld > 100 Best Places to Work in IT [2020]](https://images.idgesg.net/images/article/2019/11/ip_cw_bp20_promo_a_3x2_2400x1600-100817312-medium.3x2.jpg)
Macy’s breach is a game-changing Magecart attack
The attackers customized the Magecart code to the Macy's website to steal credit card information in the wallet and new registrations.
Hackers use free tools in new APT campaign against industrial sector firms
Attackers seek to make attribution harder and use sophisticated, realistic spear-phishing emails.
Are we running out of time to fix aviation cybersecurity?
A new report from the Atlantic Council on aviation cybersecurity underscores the poor state of aviation security — and worse, how poorly understood the problem is within the industry.
Remote hackers can modify CPU voltage to steal secrets from Intel SGX enclaves
By manipulating the voltage of Intel CPUs that use SGX, researchers can extract sensitive data, including full RSA encryption keys, from memory using the Plundervolt vulnerability.
Cryptominers and fileless PowerShell techniques make for a dangerous combo
This new dual-payload cryptojacking malware can disable Windows Antimalware Scan Interface and inject itself directly into memory of legitimate processes.
The race for quantum-proof cryptography
Lawmakers briefed on quantum computing’s threat to encryption and the urgent need for mathematical research.
The VPN is dying, long live zero trust
VPNs are part of a security strategy based on the notion of a network perimeter; trusted employees are on the inside and untrusted employees are on the outside. But that model no longer works in a modern business environment where...
Global threat groups pose new political and economic dangers
Nation-state players in Iran, North Korea, Saudi Arabia and Russia are getting new objectives and changing strategies, say experts.
Remote hackers can modify CPU voltage to steal secrets from Intel SGX enclaves
By manipulating the voltage of Intel CPUs that use SGX, researchers can extract sensitive data, including full RSA encryption keys, from memory using the Plundervolt vulnerability.
Cryptominers and fileless PowerShell techniques make for a dangerous combo
This new dual-payload cryptojacking malware can disable Windows Antimalware Scan Interface and inject itself directly into memory of legitimate processes.
The race for quantum-proof cryptography
Lawmakers briefed on quantum computing’s threat to encryption and the urgent need for mathematical research.
The VPN is dying, long live zero trust
VPNs are part of a security strategy based on the notion of a network perimeter; trusted employees are on the inside and untrusted employees are on the outside. But that model no longer works in a modern business environment where...
