Info Security Magazine
2 years, 10 months ago
Researchers Discover Reply URL Takeover Issue in Azure
Vulnerability could be exploited to gain elevated privileges
Security news aggregator
Latest coverage for Research
Research examines attack methods, defenses, and vulnerabilities, helping security teams understand risks and improve protection.
9
headlines in this view
Refine the feed
Search across headline titles and summaries.
Tag briefing
Background for this topic.
Research is the systematic study of technologies, systems, attack methods, vulnerabilities, and defensive techniques to establish evidence and produce new findings. In information security, it includes work such as discovering flaws in software or protocols, analyzing malware and attacker behavior, testing cryptographic designs, and evaluating security controls. News under this tag may describe a proof of concept, a measurement study, or a proposed technique rather than a confirmed real-world attack.
For practitioners, research can change how risks are prioritized and mitigated. A demonstrated vulnerability may require vulnerability-management teams to verify affected assets, apply fixes, or add compensating controls; responsible disclosure gives developers time to assess and remediate before technical details enable exploitation. Research involving live systems, personal data, or offensive tooling also raises privacy, authorization, dual-use, and ethical concerns. Sound findings should state their assumptions, scope, limitations, and reproducibility, since laboratory results do not automatically show that an attack is practical in every environment.
Showing 9 most recent headlines
Filtered view
The Register
2 years, 10 months ago
Pulling the strings
The critical rise of generative AI use in ransomware attacks on applications Webinar It's a fact of life that ransomware is a constant threat, like a dark cloud on every horizon. Recent research suggests that the volume of attacks has doubled in the last year.…
Bleeping Computer
2 years, 10 months ago
New stealthy techniques let hackers gain Windows SYSTEM privileges
Security researchers have released NoFilter, a tool that abuses the Windows Filtering Platform to elevate a user's privileges to increases privileges to SYSTEM, the highest permission level on Windows. [...]
Info Security Magazine
2 years, 10 months ago
TP-Link Smart Bulb Spills Wi-Fi Passwords
Researchers find four vulnerabilities in popular model
Bleeping Computer
2 years, 10 months ago
New HiatusRAT malware attacks target US Defense Department
In a new HiatusRAT malware campaign, threat actors have targeted a server belonging to the U.S. Department of Defense in what researchers described as a reconnaissance attack. [...]
Info Security Magazine
2 years, 10 months ago
Critical Insight Report: 15% Drop in Breaches, 31% Surge in Victims
The research also highlights a shift in hacker tactics toward exploiting network server flaws
Info Security Magazine
2 years, 10 months ago
Continued MOVEit Exploitation Drives Record Ransomware Attacks
NCC Group researchers observed 502 ransomware attacks in July 2023, with a large proportion made up of Clop’s continued exploitation of MOVEit
The Hacker News
2 years, 10 months ago
New Variant of XLoader macOS Malware Disguised as 'OfficeNote' Productivity App
A new variant of an Apple macOS malware called XLoader has surfaced in the wild, masquerading its malicious features under the guise of an office productivity app called "OfficeNote." "The new version of XLoader is bundled inside a standard Apple disk image with the name OfficeNote.dmg," SentinelOne security researchers Dinesh Devadoss and Phil Stokes said in a Monday analysis. "The application
Bleeping Computer
2 years, 10 months ago
TP-Link smart bulbs can let hackers steal your WiFi password
Researchers from Italy and the UK have discovered four vulnerabilities in the TP-Link Tapo L530E smart bulb and TP-Link's Tapo app, which could allow attackers to steal their target's WiFi password. [...]