Sean Michael Kerner

Among the most common types of internet attacks is web defacement, where an attacker changes a victim’s website to post a message. How are web defacements conducted and are there common trends? Those are some of the questions that a new study released on Jan. 22 by Trend Micro examines. The 64-page report analyzed data […]

Bug Bounty Hackers Make More Money Than Average Salaries, Report Finds Bug bounty programs exist to reward ethical hackers with a financial award (the “bounty”) for responsibly disclosing security vulnerabilities. What types of people participate in bug bounty programs and why do they do it? Those are just a few of the questions that managed […]

Mobile phone vendor OnePlus announced on Jan. 19 that it was the victim of a security breach that exposed credit card information of up to 40,000 customers. The admission that there was a data breach comes three days after OnePlus announced that it was temporarily disabling credit card payments on its website. OnePlus disabled the […]

A nation-state backed cyber-espionage campaign known as Dark Caracal that has been operational since 2012 has extracted hundreds of gigabytes of data from victims around the world, according the Electronic Frontier Foundation and security firm Lookout. A 51-page report that the EFF and Lookout released on Jan. 18 details the global operations of Dark Caracal, […]

Oracle has released its January Critical Patch Update, fixing 237 vulnerabilities across the company’s product portfolio. The update, released on Jan. 16, comes as cryptocurrency miner attackers take aim at vulnerabilities that Oracle patched in its October 2017 CPU. The January 2018 CPU addresses myriad security vulnerabilities, including ones affecting database, middleware, Java, PeopleSoft, Siebel and […]

Multicloud Deployments Create Security Challenges, F5 Report Finds Organizations are increasingly using multiple types of cloud deployment models for application delivery, according to F5 Networks’ 2018 State of Application Delivery report. In fact, 87 percent of organizations are currently using multiple clouds to facilitate their application delivery needs, the study found. The 37-page report, which […]

Threat management firm Anomali announced on Jan. 17 that it has raised $40 million in a Series D round of funding. The new funding will be used to help the company advance its security platform that enables organizations to identify and collaborate on cyber-threats. The new round of funding was led by Lumia Capital and […]

Facebook is hardly a small organization, with large teams of engineers and security professionals on staff. Yet even Facebook has found that it can profit from expertise outside of the company, which is why the social networking giant has continued to benefit from its bug bounty program. In 2017, Facebook paid out $880,000 to security […]

The Royal Canadian Mounted Police announced on Jan. 15 that they have arrested and charged the operator of the LeakedSource.com website with selling stolen online user identities. Charged is 27-year old Jordan Bloom of Thornhill, Ontario, on allegations that he was trafficking in identity information and was in possession of property obtained by crime. LeakedSource.com […]

7 Open-Source Serverless Frameworks Providing Functions as a Service With virtualization, organizations began to realize greater utilization from physical hardware. That trend continued with the cloud, as organizations began to get their virtual machines in a pay-as-you-go service. Cloud computing further evolved when Amazon Web Services (AWS) launched its Lambda service in 2014, introducing a […]

More than week after security researchers first publicly revealed the Meltdown and Spectre CPU vulnerabilities, vendors are continuing to deal with the impact and are issuing patches. The initial speculation about the CPU vulnerabilities was that they only impacted Intel CPUs. As it turns out, AMD and ARM CPUs are also impacted, though to a […]

A security researcher is warning of a new password bypass vulnerability in Apple’s macOS High Sierra desktop operating system, though the flaw is not nearly as severe as other issues that Apple has patched recently. Security researcher Eric Holtman publicly reported the password bypass issue on Jan. 8 by. Apple reportedly already has a fix […]