Help Net Security newsletters: Daily and weekly news, cybersecurity jobs, open source projects, breaking news – subscribe here!

Please turn on your JavaScript for this page to function normally.
IE 0-day used in watering hole attack tied to previous campaigns

An Internet Explorer zero-day vulnerability (CVE-2014-0322) is actively exploited in the wild in a watering-hole attack targeting visitors to the official website of the U.S. …

300,000 users affected by premium-SMS sending apps from Google Play

Panda Security has identified malicious apps on Google Play that can sign users up to premium SMS subscription services without their permission. These new threats have been …

Most organizations are unable to resolve a cyber attack

The lack of incident detection and investigation puts companies and their CISOs’ jobs at significant risk, according to a new Ponemon Institute study. In fact, when a …

Security vulnerability in the Duo WordPress two-factor authentication plugin

During an internal assessment, Duo Security found a vulnerability in their popular WordPress two-factor authentication plugin that completely bypasses the security measures …

Fake SSL certificates used to impersonate Facebook, Google, banks

Analysts with UK-based Internet research firm Netcraft have discovered a considerable number of fake SSL certificates in the wild, created to impersonate banks, social …

Linksys home routers targeted and compromised in active campaign

A yet undetermined vulnerability affecting certain Linksys WiFi routers is being actively and massively exploited in the wild to infect the devices with a worm dubbed …

The sad state of cyber security readiness

Just 17 per cent of UK business leaders see cyber security as a major priority, compared to 41 per cent in the US, research from BT has revealed. The research, which assessed …

Bogus Microsoft “Reactivate Your Email Account” emails doing rounds

Phishing emails purportedly sent by Microsoft are targeting the company’s customers and trying to get them to reveal their login credentials and some personal …

Mac Bitcoin-stealing Trojan lurks on download sites and GitHub

CoinThief, the recently discovered Bitcoin-stealing Trojan that targets Mac users, has been spotted being offered on several download websites such as CNET’s …

NSA snooping: MEPs table proposals to protect EU citizens’ privacy

The European Parliament should withhold its consent to an EU-US trade deal unless it fully respects EU citizens’ data privacy, says an inquiry report on NSA and EU …

New global partnership to fight cybercrime

Microsoft announced three new global partnerships with the Organization of American States, Europol and FIS to increase cooperation between international law enforcement and …

Hit with DoS, several Bitcoin exchanges suspend withdrawals

As popular Bitcoin exchanges continue to be bombarded with malformed transactions, a lot of them have decided to temporarily prevent its customers to withdraw their funds. The …

Don't miss

Cybersecurity news
Daily newsletter sent Monday-Friday
Weekly newsletter sent on Mondays
Editor's choice newsletter sent twice a month
Periodical newsletter released when there is breaking news
Weekly newsletter listing new cybersecurity job positions
Monthly newsletter focusing on open source cybersecurity tools