Threats

Major Websites Vulnerable to their Own Back-End Servers

DoD, other websites found with back-end server flaws and misconfigurations that could give attackers an entryway to internal networks, researcher will demonstrate at Black Hat USA next month.

Invisible Invaders: Why Detecting Bot Attacks Is Becoming More Difficult

Traditional methods can't block the latest attackers, but a behavioral approach can tell the difference between bots and humans.

Hacker Bypasses Microsoft ATA for Admin Access

Microsoft's Advanced Threat Analytics defense platform can be cheated, a researcher will show at Black Hat USA next month.

Forrester: Rapid Cloud Adoption Drives Demand for Security Tools

Cloud services revenue is poised to skyrocket from $114 billion in 2016 to $236 billion by 2020, driving the market for products to secure data in the cloud.

Engineer Sentenced to Prison for Hacking Utility, Disabling Water Meter-Readers

A Pennsylvania man is sentenced to more than a year in prison after hacking into a remote water meter reading system run by his former employer.

FIN10 Threat Actors Hack and Extort Canadian Mining, Casino Industries

Previously unknown threat actor has extracted hundreds of thousands of dollars from Canadian companies in a vicious cyberattack campaign that dates back to 2013, FireEye says.

Lack of Experience Biggest Obstacle for InfoSec Career

A majority of wanna-be infosec professionals find they need more experience to be a contender to enter this career, according to a recent Tripwire poll.

Why Your AppSec Program Is Doomed to Fail & How to...

With these measures in place, organizations can avoid common pitfalls.

NSA Reportedly Confident North Korea Was Behind WannaCry

But some say no evidence exists to unequivocally pin blame for attacks on Pyongyang.

Samsung KNOX Takes Some Knocks

Researcher at Black Hat USA will reveal Samsung KNOX 2.6 vulnerabilities and bypass techniques, and notes that new KNOX 2.8 may be at risk as well.

1 Million Endpoints Exposed on Public Internet via Microsoft File-Sharing Services

Research on global Internet security posture found endpoints leaving Microsoft SMB file-sharing systems wide open online, a finding that explains the rapid spread of WannaCry, Rapid7 says.