Security Experts:
Ionut Arghire
Ionut Arghire is an international correspondent for SecurityWeek.
Recent articles by Ionut Arghire
-
GitHub Security Lab will help developers and maintainers identify and report security flaws, and leverage GitHub to create fixes, coordinate disclosure, and update projects.
-
Two Massachusetts men were arrested and charged this week for employing SIM swapping in attacks aimed at stealing cryptocurrency from their victims’ accounts.
-
Backend operation services provider InfoTrax Systems has reached a settlement with the FTC over a data breach discovered in 2016.
-
Messaging app LINE launches public bug bounty program with rewards of up to $30,000.
-
Symantec Endpoint Protection is the latest antivirus product found to unsafely load DLLs into a process that runs with SYSTEM privileges.
-
A new JavaScript skimmer targets data entered into the payment forms of ecommerce merchant websites, Visa warns.
-
American not-for-profit organization MITRE launches a tech foundation focused on strengthening critical infrastructure through partnerships with the private sector.
-
A vulnerability affecting several McAfee antivirus products could allow an attacker to evade self-defense mechanisms and achieve persistence.
-
Trend Micro announces the launch of new smart factory security solutions designed to protect ICS environments.
-
SAP this week released 11 Notes as part of the November 2019 Security Patch Day, along with four updates to previously released Security Notes.
-
A newly discovered piece of ransomware written in PureBasic has been linked to a Malware-as-a-Service (MaaS) provider that has been used by Cobalt Gang, FIN6, and other threat groups.
-
Mexican state-owned oil company Petróleos Mexicanos (Pemex) has suffered a ransomware attack that took down parts of its network.
-
Magento is advising users to apply patches for a remote code execution flaw that could allow unauthenticated attackers to deliver malicious payloads.
-
Enterprise information management firm OpenText to acquire data protection and cybersecurity provider Carbonite in a $1.42 billion deal.
-
ASP.NET hosting provider SmarterASP.NET is currently working on recovering customer data after being hit by a ransomware attack over the weekend.
-
Crowdsourced security platform Bugcrowd paid over half a million dollars in bug bounty rewards during the last week of October alone.
-
A newly discovered backdoor associated with the Platinum APT has a long sequence of dropping, downloading and installing stages.
-
Critical vulnerabilities impacting Medtronic Valleylab products could allow attackers to overwrite files and achieve remote code execution, DHS warns.
-
Microsoft warns that the BlueKeep exploit will likely be used to deliver payloads more damaging than cryptocurrency miners.
-
Cisco Talos security researchers have discovered multiple vulnerabilities in the LEADTOOLS imaging toolkits that could lead to code execution on the victim system.
-
A new exploit kit named Capesand is being employed in live attacks despite still being in an unfinished state.
-
Cisco patches multiple vulnerabilities across products such as Small Business Routers, TelePresence Collaboration Endpoint, RoomOS, and others.
-
Google this week announced a partnership with several security solutions providers, aimed at fighting bad applications in the Android ecosystem.
-
NVIDIA this week released security updates to address multiple vulnerabilities in GPU Display Driver and GeForce Experience.
-
A vulnerability discovered in multi-format archive and compression library libarchive could lead to arbitrary code execution and denial of service.
SecurityWeek Daily Briefing
- Fears Grow on Digital Surveillance: US Survey
- New GitHub Security Lab Aims to Secure Open Source Software
- Two Massachusetts Men Arrested and Charged in SIM Swapping Scheme
- Undocumented Access Feature Exposes Siemens PLCs to Attacks
- InfoTrax Settles With FTC Over Data Breach
- Over 100,000 Fake Domains With Valid TLS Certificates Target Major Retailers
- LINE Launches Public Bug Bounty Program on HackerOne
- Corellium: Apple Sued Us After Failed Acquisition Attempt
- Securing Autonomous Vehicles Paves the Way for Smart Cities
- DLL Hijacking Flaw Impacts Symantec Endpoint Protection
Copyright © 2019 Wired Business Media. All Rights Reserved. Privacy Policy