Newsroom (Archive)

CVE-2017-11882 has been attackers' favorite malware delivery mechanism throughout the second and third quarters of 2019.   The third quarter of 2019 brought the rise of keylogger Agent Tesla, the decline of phishing-delivered ransomware-as-a-service (RaaS), and attackers' continued preference for exploiting the CVE-2017-11882 Microsoft Office vulnerability to deliver phishing campaigns.   Emotet began to surge toward the end of last quarter, according to Cofense's Q3 2019 Malware Trends Report,...

The Australian Signals Directorate’s Australian Cyber Security Centre (ACSC) is investigating a widespread malware campaign known as Emotet. Emotet is a Trojan virus delivered via emails sent with malicious attachments. Cyber criminals use malware for different reasons, most commonly to steal personal or valuable information from which they can profit, hold recipients to ransom or install damaging programs onto devices without your knowledge. Email users should always exercise...

In rush to fix newly discovered security issues, developers are neglecting to address older ones, Veracode study finds.   The latest edition of Veracode's annual "State of Software Security" study released this week shows that many enterprise organizations are at increased breach risk because of aging, unaddressed application security flaws.   Veracode recently analyzed data from application security tests on more than 85,000 applications and found that, on average,...