Latest news
Well, attackers have shifted away from mass distribution of a small number of threats to micro distribution of large families of threats. These new strains of malware consist of millions of distinct threats that mutate as they spread rapidly as a single, core piece of malware.
For years, consumers have been warned about mobile devices becoming susceptible to viruses as much as desktop computers. We're still a long way from that point but infections are starting to appear. What kind of evolution can we expect?
With the increasingly widespread usage of more sophisticated mobile devices the attack surface is increasing, but we still haven't seen many threats that are successful at attacking mobile devices directly, for example through Bluetooth or the device's Internet connection. I think an attack on mobile devices will be most likely to originate from Web sites targeting a vulnerability in the device's browser. Attackers already try to compromise multiple browsers from a single site, consider for example drive-by downloads, iframes, etc., so adding an exploit targeting a vulnerability in a mobile device browser to the same site would be easy enough.
Spotlight

The security of WordPress plugins
Posted on 18 June 2013. | Checkmarx’s research lab identified that more than 20% of the 50 most popular WordPress plugins are vulnerable to common Web attacks, such as SQL Injection.

Information security executives need to be strategic thinkers
Posted on 17 June 2013. | George Baker, the Director of Information Security at Exostar, talks about the challenges in working in a dynamic threat landscape, offers tips for aspiring infosec leaders, and more.

Large orgs in denial about own security breaches?
Posted on 14 June 2013. | Over two thirds (66%) of large organizations said they either had not experienced a security incident in the last 12-18 months or were unsure if they had.

Vulnerability scanning with PureCloud
Posted on 12 June 2013. | nCircle PureCloud is a cloud-based network security scanning product built upon the companies' vulnerability and risk management system IP360.

Reactions from the security community to the NSA spying scandal
Posted on 11 June 2013. | Read on for comments on this scandal that Help Net Security received from a variety of security professionals and analysts.
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.







