Wednesday 28 February 2018

Misconfigured Memcached Servers Abused to Amplify DDoS Attacks

Over the past few days researchers say DDoS attacks have been using memcached servers to amplify DDoS attacks using UDP-based packets.

from Threatpost | The first stop for security news http://ift.tt/2GRfHUd
via https://ifttt.com/ IFTTT

"RedDrop" Mobile Malware Records Ambient Audio

A newly detailed mobile malware can do more than steal data from infected devices: it can also record ambient audio and send the recordings to cloud storage accounts controlled by attackers.

read more



from SecurityWeek RSS Feed http://ift.tt/2oELCzB
via https://ifttt.com/ IFTTT

ФСТЭК лишила Palo Alto сертификата за неисправленные уязвимости

ФСТЭК лишила Palo Alto сертификата за неисправленные уязвимости

Федеральная служба по техническому и экспортному контролю (ФСТЭК) сообщила об аннулировании ранее выданных разработчикам программ сертификатов соответствия. Причиной такого решения послужило наличие в продуктах непропатченных уязвимостей.



from Новости информационной безопасности - Anti-Malware.ru http://ift.tt/2oDszFZ
via https://ifttt.com/ IFTTT

Avoid Becoming a Crypto-Mining Bot: Where to Look for Mining Malware and How to Respond

At a white elephant party in northern Colorado in December, a friend of mine was telling me that he’d borrowed against his children’s college funds to put money into three different cryptocurrencies. 

“I didn’t realize you followed the community,” I said.

read more



from SecurityWeek RSS Feed http://ift.tt/2oxDku2
via https://ifttt.com/ IFTTT

Russian Hackers Infiltrated German Ministries' Network: Report

Berlin - Russian hackers have infiltrated Germany's foreign and interior ministries' online networks, German news agency DPA reported Wednesday quoting unnamed security sources.

read more



from SecurityWeek RSS Feed http://ift.tt/2GQ8gwk
via https://ifttt.com/ IFTTT

Fortinet Enhances Network Security OS, Adds AI-based Threat Detection

Two major new product announcements were made at Fortinet’s Accelerate 18 conference this week, including a new machine learning (ML) threat intelligence and detection offering, along with a major upgrade to the Fortinet Security Fabric (FortiOS).

read more



from SecurityWeek RSS Feed http://ift.tt/2F1d0mA
via https://ifttt.com/ IFTTT

SecOps: The Roadkill Victim of DevOps' Need for Speed

DevSecOps Remains a Theory Not Often Implemented in Practice

read more



from SecurityWeek RSS Feed http://ift.tt/2GQ3aAc
via https://ifttt.com/ IFTTT

Emerson Patches Severe Flaw in ControlWave Controllers

Automation solutions provider Emerson has patched a potentially serious denial-of-service (DoS) vulnerability in its ControlWave Micro Process Automation Controller product.

read more



from SecurityWeek RSS Feed http://ift.tt/2GQO9y6
via https://ifttt.com/ IFTTT