How to Buy Precious Patching Time as Log4j Exploits Fly

Sure, Apache got a patch out fast when the Log4j logging library vulnerability – aka Javageddon or “up there with Shellshock” – exploded last week. But emergency patches take days best-case scenario or weeks to install: plenty of time for attackers to do their worst. Which they lickety-split did,...

Silver Sparrow malware on 30,000 Macs leaves security pros confused

By Habiba Rashid According to researchers, as of mid-February, Silver Sparrow malware has affected almost 30,000 macOS across 153 countries. This is a post from HackRead.com Read the original post: Silver Sparrow malware on 30,000 Macs leaves security pros confused...

Celebrate Cybersecurity Awareness Month with These Tips From a Survey of 1,200 Security Pros

Held every October, National Cybersecurity Awareness Month NCSAM is a collaborative effort between government and industry meant to raise awareness about the importance of cybersecurity. NCSAM is focused largely on consumer awareness, but for cybersecurity leaders, it is also a great opportunity ...

Exploring the Top 15 Most Common Vulnerabilities with HackerOne and GitHub

Join vulnerability experts Michiel Prins, cofounder of HackerOne, and Greg Ose, GitHub’s application security engineering manager, as Threatpost editor Tom Spring moderates a discussion on the 15 most common vulnerability types. Registration Required Originally presented in March 2019, this webin...

The Pentagon Is Publishing Foreign Nation-State Malware

This is a new thing: The Pentagon has suddenly started uploading malware samples from APTs and other nation-state sources to the website VirusTotal, which is essentially a malware zoo that's used by security pros and antivirus/malware detection engines to gain a better understanding of the threat...

New Conference Wants to Bring Malware Writers Out of the Shadows

ED: Malcon Conference hopes to bring malware writers out of the shadows DEK: Malcon, a new, Mumbai-based conference, says that the security community can benefit from what malware authors have to teach. The computer security community is used to vilifying the hackers and malware authors who choos...