Wednesday, 28 February 2018

Misconfigured Memcached Servers Abused to Amplify DDoS Attacks

Over the past few days researchers say DDoS attacks have been using memcached servers to amplify DDoS attacks using UDP-based packets.

from Threatpost | The first stop for security news http://ift.tt/2GRfHUd
via https://ifttt.com/ IFTTT

"RedDrop" Mobile Malware Records Ambient Audio

A newly detailed mobile malware can do more than steal data from infected devices: it can also record ambient audio and send the recordings to cloud storage accounts controlled by attackers.

read more



from SecurityWeek RSS Feed http://ift.tt/2oELCzB
via https://ifttt.com/ IFTTT

ФСТЭК лишила Palo Alto сертификата за неисправленные уязвимости

ФСТЭК лишила Palo Alto сертификата за неисправленные уязвимости

Федеральная служба по техническому и экспортному контролю (ФСТЭК) сообщила об аннулировании ранее выданных разработчикам программ сертификатов соответствия. Причиной такого решения послужило наличие в продуктах непропатченных уязвимостей.



from Новости информационной безопасности - Anti-Malware.ru http://ift.tt/2oDszFZ
via https://ifttt.com/ IFTTT

Avoid Becoming a Crypto-Mining Bot: Where to Look for Mining Malware and How to Respond

At a white elephant party in northern Colorado in December, a friend of mine was telling me that he’d borrowed against his children’s college funds to put money into three different cryptocurrencies. 

“I didn’t realize you followed the community,” I said.

read more



from SecurityWeek RSS Feed http://ift.tt/2oxDku2
via https://ifttt.com/ IFTTT

Russian Hackers Infiltrated German Ministries' Network: Report

Berlin - Russian hackers have infiltrated Germany's foreign and interior ministries' online networks, German news agency DPA reported Wednesday quoting unnamed security sources.

read more



from SecurityWeek RSS Feed http://ift.tt/2GQ8gwk
via https://ifttt.com/ IFTTT

Fortinet Enhances Network Security OS, Adds AI-based Threat Detection

Two major new product announcements were made at Fortinet’s Accelerate 18 conference this week, including a new machine learning (ML) threat intelligence and detection offering, along with a major upgrade to the Fortinet Security Fabric (FortiOS).

read more



from SecurityWeek RSS Feed http://ift.tt/2F1d0mA
via https://ifttt.com/ IFTTT

SecOps: The Roadkill Victim of DevOps' Need for Speed

DevSecOps Remains a Theory Not Often Implemented in Practice

read more



from SecurityWeek RSS Feed http://ift.tt/2GQ3aAc
via https://ifttt.com/ IFTTT

Emerson Patches Severe Flaw in ControlWave Controllers

Automation solutions provider Emerson has patched a potentially serious denial-of-service (DoS) vulnerability in its ControlWave Micro Process Automation Controller product.

read more



from SecurityWeek RSS Feed http://ift.tt/2GQO9y6
via https://ifttt.com/ IFTTT