News & Commentary
Latest Content tagged with Mobile
|
8 Security Tips for a Hassle-Free Summer Vacation
It's easy to let your guard down when you're away. Hackers know that, too.
Email, Social Media Still Security Nightmares
Phishing and banking trojans continue to be major threats brought into the enterprise.
Hackers Crack iPhone Defense Built to Block Forensic Tools
Grayshift, the company behind a system to help police break into iPhones, says it found a workaround for USB Restricted Mode.
Mobile App Threats Continue to Grow
Criminals looking to profit from corporate resources and information keep going after mobile devices, two new reports confirm.
'Shift Left' & the Connected Car
How improving application security in the automotive industry can shorten product development time, reduce costs, and save lives.
5 Tips for Protecting SOHO Routers Against the VPNFilter Malware
Most home office users need to simply power cycle their routers and disable remote access; enterprises with work-at-home employees should move NAS behind the firewall.
Mobile Malware Moves to Mine Monero (and Other Currencies)
A new report shows that cryptocurrencies tend to be the focus of a growing number of malicious apps.
Android Malware Comes Baked into Some New Tablets, Phones
Ad-loading malware is being built into the firmware and operating system of some new tablets and phones from three major manufacturers.
Privacy Group: Facebook, Google Policies Break GDPR Laws
Nonprofit 'None of Your Business' files complaints against Facebook, Google, WhatsApp, and Instagram.
Windows 10 Adoption Grew 75%, Adobe Flash Plummeted 188% in 2017: Report
Authentication data reveals an increase in Apple devices, poor mobile security, and the rapid disappearance of Flash from browsers.
ZipperDown Vulnerability Could Hit 10% of iOS Apps
A newly discovered vulnerability could affect thousands of iOS apps -- and Android users may not be spared.
'Roaming Mantis' Android Malware Evolves, Expands Targets
Roaming Mantis has evolved rapidly, adding geographies, platforms, and capabilities to its original scope.
Cracking 2FA: How It's Done and How to Stay Safe
Two-factor authentication is a common best security practice but not ironclad. Here's how it can be bypassed, and how you can improve security.
Phishing Attack Bypasses Two-Factor Authentication
Hacker Kevin Mitnick demonstrates a phishing attack designed to abuse multi-factor authentication and take over targets' accounts.
Phishing Threats Move to Mobile Devices
Mobile devices are emerging as a primary gateway for phishing attacks aimed at stealing data.
APT Attacks on Mobile Rapidly Emerging
Mobile devices are becoming a 'primary' enterprise target for attackers.
What Meltdown and Spectre Mean for Mobile Device Security
Here are four tips to keep your mobile users safe from similar attacks.
Google Adds Security Features to Gmail Face-lift
A redesigned Gmail brings new security measures to improve data protection and applications for artificial intelligence.
Biometrics Are Coming & So Are Security Concerns
Could these advanced technologies be putting user data at risk?
Securing Social Media: National Safety, Privacy Concerns
It's a critical time for social media platforms and the government agencies and private businesses and individuals using them.
DHS Helps Shop Android IPS Prototype
A MITRE-developed intrusion prevention system for mobile technology is showcased here this week at the RSA Conference.
INsecurity Conference Seeks Security Pros to Speak on Best Practices
Dark Reading's second annual data defense conference will be held Oct. 23-25 in Chicago; call for speakers is issued.
Pairing Policy & Technology: BYOD That Works for Your Enterprise
An intelligent security policy coupled with the right technology can set you up for success with BYOD.
HTTP Injector Steals Mobile Internet Access
Users aren't shy about sharing the technique and payload in a new attack.
89% of Android Users Didn't Consent to Facebook Data Collection
A new survey shows most Android users did not give Facebook permission to collect their call and text data.
Deep Instinct Adds MacOS Support
Deep Instinct adds support for MacOS, Citrix, and multi-tenancy in its version 2.2 release.
Protect Yourself from Online Fraud This Tax Season
Use these tips to stay safe online during everyone's least-favorite time of the year.
Qualys Buys 1Mobility Software Assets
Qualys has purchased the software assets of 1Mobility for an undisclosed sum.
Under Armour App Breach Exposes 150 Million Records
A breach in a database for MyFitnessPal exposes information on 150 million users.
New Android Cryptojacker Can Brick Phones
Mobile cryptojacking malware mines Monero.
Looking Back to Look Ahead: Cyber Threat Trends to Watch
Data from the fourth quarter of last year shows the state of application exploits, malicious software, and botnets.
Phantom Secure 'Uncrackable Phone' Execs Indicted for RICO Crimes
Executives of Phantom Secure have been indicted on federal RICO charges for encrypting communications among criminals.
Online Ads vs. Security: An Invisible War
Why visiting one website is like visiting 50, and how you can fight back against malvertisers.
What's the C-Suite Doing About Mobile Security?
While most companies have security infrastructure for on-premises servers, networks, and endpoints, too many are ignoring mobile security. They'd better get moving.
Asia's Security Leaders Feel Underprepared for Future Threats: Report
A new study highlights major concerns of cybersecurity leaders in Asia, where most fear critical infrastructure attacks, advanced threats, and social engineering.
IoT Product Safety: If It Appears Too Good to Be True, It Probably Is
Proposed new connected-product repair laws will provide hackers with more tools to make our lives less secure.
Researchers Defeat Android OEMs' Security Mitigations
At Black Hat Asia, two security experts will bypass security improvements added to Android by equipment manufacturers.
Connected Cars Pose New Security Challenges
The auto industry should seize the opportunity and get in front of this issue.
Securing the Web of Wearables, Smartphones & Cloud
Why security for the Internet of Things demands that businesses revamp their software development lifecycle.
What Enterprises Can Learn from Medical Device Security
In today's cloud-native world, organizations need a highly distributed approach that ties security to the workload itself in order to prevent targeted attacks.
New Android Malware Family Highlights Evolving Mobile Threat Capabilities
RedDrop can steal data, record audio, and rack up SMS charges for victims, says Wandera.
Threats from Mobile Ransomware & Banking Malware Are Growing
The number of unique mobile malware samples increased sharply in 2017 compared to a year ago, according to Trend Micro.
10 Can't-Miss Talks at Black Hat Asia
With threats featuring everything from nation-states to sleep states, the sessions taking place from March 20-23 in Singapore are relevant to security experts around the world.
The Mobile Threat: 4 out of 10 Businesses Report 'Significant' Risk
Organizations put efficiency and profit before security, leading to system downtime and data loss, according to inaugural research from Verizon.
Can Android for Work Redefine Enterprise Mobile Security?
Google's new mobility management framework makes great strides in addressing security and device management concerns while offering diverse deployment options. Here are the pros and cons.
Google Paid $2.9M for Vulnerabilities in 2017
The Google Vulnerability Reward Program issued a total of 1,230 rewards in 2017. The single largest payout was $112,500.
Apple iOS iBoot Secure Bootloader Code Leaked Online
Lawyers for Apple called for the source code to be removed from GitHub.
Identity Fraud Hits All-Time High in 2017
Survey reports that the number of fraud victims topped 16 million consumers last year, and much of that crime has moved online.
Mastering Security in the Zettabyte Era
Many businesses are ill-equipped to deal with potential risks posed by billions of connected devices, exponential data growth, and an unprecedented number of cyber threats. Here's how to prepare.
3 Ways Hackers Steal Your Company's Mobile Data
The most effective data exfiltration prevention strategies are those that are as rigorous in vetting traffic entering the network as they are traffic leaving it.
|
White Papers
Video
0 Comments
Current Issue
Flash Poll
The State of IT and Cybersecurity
IT and security are often viewed as different disciplines - and different departments. Find out what our survey data revealed, read the report today!
Twitter Feed
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database CVE-2018-12697
PUBLISHED: 2018-06-23
PUBLISHED: 2018-06-23
PUBLISHED: 2018-06-23
PUBLISHED: 2018-06-23
PUBLISHED: 2018-06-23
From DHS/US-CERT's National Vulnerability Database CVE-2018-12697
PUBLISHED: 2018-06-23
A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in work_stuff_copy_to_from in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. This can occur during execution of objdump.
CVE-2018-12698PUBLISHED: 2018-06-23
demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the "Create an array for saving the template argument values" XNEWVEC call. This can occur during execution of objdump.
CVE-2018-12699PUBLISHED: 2018-06-23
finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write of 8 bytes. This can occur during execution of objdump.
CVE-2018-12700PUBLISHED: 2018-06-23
A Stack Exhaustion issue was discovered in debug_write_type in debug.c in GNU Binutils 2.30 because of DEBUG_KIND_INDIRECT infinite recursion.
CVE-2018-11560PUBLISHED: 2018-06-23
The webService binary on Insteon HD IP Camera White 2864-222 devices has a stack-based Buffer Overflow leading to Control-Flow Hijacking via a crafted usr key, as demonstrated by a long remoteIp parameter to cgi-bin/CGIProxy.fcgi on port 34100.
- Terms of Service
- Privacy Statement
- Legal Entities
- Copyright © 2018 UBM, All rights reserved
Tweet This