• Prev. page
• 1
• 2
• 3
• Next page

• Microsoft releases Fix it for critical IE8 0-day

  09.05.2013

  Microsoft has released a one-click Fix it for mitigating the effect of the IE 8 zero-day vulnerability that is being used in watering hole attacks in the wild.

• Multi-stage exploit attacks for more effective malware delivery

  03.05.2013

  Most drive-by exploit kits use a minimal exploit shellcode that downloads and runs the final payload.

• Sophisticated Apache backdoor in the wild

  29.04.2013

  ESET researchers, together with web security firm Sucuri, have been analyzing a new threat affecting Apache webservers.

• Exploit for recently patched Java flaw added to CrimeBoss exploit kit

  23.04.2013

  If you are still using Java, you insist on updating in manually and you haven't gotten around to installing the latest Critical Patch Update released a week ago, you are advised to do it now, as an exploit for one of the vulnerabilities it patched has been incorporated into a popular exploit kit and is being actively used in the wild.

• Financial malware hijacking Twitter accounts

  23.04.2013

  Researchers have discovered another active spamming campaign targeting Twitter users.

• Prev. page
• 1
• 2
• 3
• Next page

Spotlight

The security of WordPress plugins

Posted on 18 June 2013.  |  Checkmarx’s research lab identified that more than 20% of the 50 most popular WordPress plugins are vulnerable to common Web attacks, such as SQL Injection.

Information security executives need to be strategic thinkers

Posted on 17 June 2013.  |  George Baker, the Director of Information Security at Exostar, talks about the challenges in working in a dynamic threat landscape, offers tips for aspiring infosec leaders, and more.

Large orgs in denial about own security breaches?

Posted on 14 June 2013.  |  Over two thirds (66%) of large organizations said they either had not experienced a security incident in the last 12-18 months or were unsure if they had.

Vulnerability scanning with PureCloud

Posted on 12 June 2013.  |  nCircle PureCloud is a cloud-based network security scanning product built upon the companies' vulnerability and risk management system IP360.

Reactions from the security community to the NSA spying scandal

Posted on 11 June 2013.  |  Read on for comments on this scandal that Help Net Security received from a variety of security professionals and analysts.