Author: Robert Lemos Contributing Writer

Wireless security protocols have improved, but product vendors continue to make implementation errors that allow a variety of attacks.

Attacks require executing code on a system but foil Apple’s approach to protecting private data and systems files.

Web application attacks against the video game industry quadrupled in 2020 compared to the previous year, but companies outside entertainment can learn from the data.

Companies may no longer have Internet-facing file servers or weakly secured Web servers, but attackers that get by the perimeter have a wide-open landscape of vulnerability.

More companies moved to cloud-native infrastructure in the past year, and security incidents and malware moved right along with them.

The ubiquity of Microsoft Office document formats means attackers will continue to use them to spread malware and infect systems.

Measures of programming speed, security, and automation have all significantly increased in the past year, GitLab’s latest survey finds.

A Northeastern University research team finds code defects — and some vulnerabilities — by detecting when programmers used different code snippets to perform the same functions.

Version 9 of the popular threat matrix will improve support for a variety of platforms, including cloud infrastructure.

Version 9 of the popular threat matrix will improve support for a variety of platforms, including cloud infrastructure.

Following their release of 70 different vulnerabilities in different implementations of TCP/IP stacks over the past year, two companies find a common link.

The One-Stop Anomaly Shop (OSAS) project packages machine-learning algorithms into a Docker container for finding anomalies in security log data.

While access to compromised systems has become an increasingly common service, some cybercriminals are going straight to the source: buying code bases and then updating the application with malicious code.

Attackers have doubled down on ransomware and phishing — with some tweaks — while deepfakes and disinformation will become more major threats in the future, according to a trio of threat reports.

Lack of strong security policies put many schools at risk of compromise, disrupted services, and collateral damage.

Almost four of every five attacks attributed in 2020 were conducted by cybercriminal groups, a significant jump from 2019, with attacks on healthcare or using the pandemic rising fast.

A proof-of-concept program infects systems with ARM64-compiled binaries and then reaches out to download additional functionality.

The software giant found no evidence that attackers gained extensive access to services or customer data.

Similar to previous ransomware takedowns, this disruption to the ransomware-as-a-service model will likely be short-lived, security experts say.

Fewer systems have flaws; however, the time to remediate vulnerabilities stays flat, and many issues targeted by in-the-wild malware remain open to attack.

If past cyberattacks are any indication, success begets imitation. In the wake of last week’s hack of Florida water utility, other water utilities and users of remote desktop software would be wise to shore up defenses, experts say.

Vulnerability disclosure started off slow but caught up by the end of the year, according to a new report.

The intrusion also shows how redundancy and detection can minimize damage and reduce impact to the population.