Help Net Security newsletters: Latest news, cybersecurity jobs, open source – subscribe here!

Please turn on your JavaScript for this page to function normally.
Hacking Team used fake app hosted on Google Play to install its spyware on Android devices

“The massive Hacking Team data leak includes the source code of a fake Android news app and instructions on how to use it, Trend Micro researchers have found. The app, …

Is this the death knell for the RC4 encryption algorithm?

It has been known for quite some time that the RC4 cryptographic cypher – used in popular Internet protocols such as TLS and HTTPS – is vulnerable to attack, but …

Researchers prove HTML5 can be used to hide malware

“A group of Italian researchers have come up with new obfuscation techniques that can be used to dupe malware detection systems and allow malicious actors to execute …

New GamaPoS malware targets US companies

“After dedicating their efforts to swelling the number of computers roped into their malicious net, the masters of the Andromeda botnet are putting it to use by …

Epic Games forums hacked, user data stolen

The forums of popular game development company Epic Games have been hacked, and the users’ username, email address, password and date of birth have likely been …

Hacking Team spyware survives on target systems with help of UEFI BIOS rootkit

How did Hacking Team make sure that its Remote Control System (RCS) spyware will remain on targets’ computers even if they reinstall their OS, format their hard drives …

Oracle fixes Java zero-day exploited by Pawn Storm hackers

With its quarterly Critical Patch Update, Oracle has released security fixes for 193 vulnerabilities across all of its products (a good summary can be found here), including …

Duke APT group adds low-profile SeaDuke Trojan to their malware arsenal

“Not much is known about the cyber espionage group that wields the so-called “Dukes”: backdoors and information stealers that all have “Duke” in …

Adobe patches Hacking Team Flash zero-days, update immediately!

Adobe has released new versions of Flash Player, Shockwave Player and Acrobat and Reader, all of which fix critical vulnerabilities that could potentially allow an attacker to …

Firefox blocks Flash plugin by default until zero-days are fixed

For the last few years, many security experts have been urging users to evaluate whether they actually need to use Adobe Flash.The platform, once practically unavoidable, now …

65,000+ Land Rovers recalled due to software bug

Jaguar Land Rover has announced that owners of Range Rover and Range Rover Sport vehicles manufactured since 2013 will have to visit car dealers and get their car’s …

Germany’s new cyber-security law aimed at securing critical infrastructure

German institutions and businesses that fall in the “critical infrastructure” category will have to implement new information security measures, as defined by the …

Don't miss

Cybersecurity news