article thumbnail

Security testing firm NSS Labs ceases operations, citing coronavirus

TechCrunch

NSS Labs retracted its “caution” rating for CrowdStrike’s Falcon platform in 2019, after the two companies confidentially settled a lawsuit challenging the results. But the last few years have been rocky.

Testing 50
article thumbnail

WatchBog Malware Adds BlueKeep Scanner (CVE-2019-0708), New Exploits (CVE-2019-10149, CVE-2019-11581)

Tenable

Scanner for “BlueKeep” vulnerability and newly minted exploits for Exim and Jira incorporated into cryptocurrency mining malware. On July 24, researchers at Intezer published a blog about a new variant of the WatchBog malware. CVE-2019-7238. CVE-2019-0192. CVE-2019-10149. CVE-2019-11581. CVE-2019-0708.

Malware 14
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Trending Sources

article thumbnail

From Bugs to Breaches: 25 Significant CVEs As MITRE CVE Turns 25

Tenable

Attackers could exploit Shellshock to gain full control of vulnerable systems, leading to data breaches, service interruptions and malware deployment. By sending crafted HTTP requests, attackers could gain RCE and take full control of affected devices to install malware or steal data. The impact extended far beyond local systems.

article thumbnail

The Future of Machine Learning in Cybersecurity

CIO

Not all that long ago, it was common for enterprises to rely on signature-based detection for malware, static firewall rules for network traffic and access control lists (ACLs) to define security policies. Gaining malware samples is a lot harder than acquiring data in image processing and NLP. Internet of Things, IT Leadership

article thumbnail

‘If you compromise the bootloader, you pwn the whole phone’

The Parallax

The vulnerabilities, discovered by Ilja van Sprundel and Joseph Tartaro at security research company IOActive , and by Andrea Barisani at antivirus company F-Secure , affect a wide range of bootloaders, including Das U-Boot , Coreboot , Grub , Seabios , CFE , iPXE , and TianoCore , they disclosed at PacSec 2019 here in November.

article thumbnail

Microsoft's December 2019 Patch Tuesday Includes Fix for Zero Day Exploited in the Wild (CVE-2019-1458)

Tenable

Microsoft closes out 2019 by patching 36 CVEs, including one flaw that was exploited in the wild as a zero-day. The December 2019 Patch Tuesday contains updates for 36 CVEs, seven of which are rated as critical. CVE-2019-1458 | Win32k Elevation of Privilege Vulnerability.

article thumbnail

SecureAge Integrates Artificial Intelligence Powered APEX Anti-Malware Engine in VirusTotal

DevOps.com

The post SecureAge Integrates Artificial Intelligence Powered APEX Anti-Malware Engine in VirusTotal appeared first on DevOps.com.