Targeted attacks using multiple attack vectors including email and watering hole sides has been discovered. The state-sponsored attacks targeted Indian diplomatic and military personnel originating from that Pakistan region, researchers said.
Researchers claim major banks are implementing poor password policies and leaving customers vulnerable to brute force “key-search” attacks.
At the RSA Conference, nearly two years after Heartbleed, members of OpenSSL’s Development Team described some benefits the nasty bug afforded them.
The latest Internet-wide crypto vulnerability has arrived in DROWN, which can be abused by attackers to carry out man-in-the-middle attacks and decrypt traffic.
The White House wants to renegotiate the divisive U.S. implementation of the Wassenaar Arrangement rules as they relate to intrusion software.
Researchers say when it comes to car hacking, it’s going to take three years for automakers to catch up with the number of cyber threats targeting cars.
In a scathing report that looks at the current state of hospital security, researchers say everything from bedside patient monitoring systems, automated drug dispensing machines to patient records are inadequately protected.
Researcher Troy Hunt explains how his hack of a Nissan Leaf works, and his experience disclosing the issue to the carmaker.
Automaker Nissan has deactivated remote access to its cars after a security researcher discovered a remote access vulnerability tied to GPS data and climate control functions.
Drupal addressed 10 vulnerabilities in the CMS this week, including a critical access bypass issue and another issue that could lead to remote code execution.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
