The Hacker News
3 years, 7 months ago
Boost Your Security with Europe's Leading Bug Bounty Platform
As 2022 comes to an end, now's the time to level up your bug bounty program with Intigriti
Security news aggregator
Latest coverage for Research
Research examines attack methods, defenses, and vulnerabilities, helping security teams understand risks and improve protection.
10
headlines in this view
Refine the feed
Search across headline titles and summaries.
Tag briefing
Background for this topic.
Research is the systematic study of technologies, systems, attack methods, vulnerabilities, and defensive techniques to establish evidence and produce new findings. In information security, it includes work such as discovering flaws in software or protocols, analyzing malware and attacker behavior, testing cryptographic designs, and evaluating security controls. News under this tag may describe a proof of concept, a measurement study, or a proposed technique rather than a confirmed real-world attack.
For practitioners, research can change how risks are prioritized and mitigated. A demonstrated vulnerability may require vulnerability-management teams to verify affected assets, apply fixes, or add compensating controls; responsible disclosure gives developers time to assess and remediate before technical details enable exploitation. Research involving live systems, personal data, or offensive tooling also raises privacy, authorization, dual-use, and ethical concerns. Sound findings should state their assumptions, scope, limitations, and reproducibility, since laboratory results do not automatically show that an attack is practical in every environment.
Showing 10 most recent headlines
Filtered view
The Hacker News
3 years, 7 months ago
Black Basta Ransomware Gang Actively Infiltrating U.S. Companies with Qakbot Malware
Companies based in the U.S. have been at the receiving end of an "aggressive" Qakbot malware campaign that leads to Black Basta ransomware infections on compromised networks
Dark Reading
3 years, 7 months ago
Penetration Testing Market Size Is Projected to Reach $5.28B Globally by 2028
Fueling the trend are the rising adoption of cloud computing solutions, technology advancements, stricter data safety regulations, and the move to digitalization, says Brandessence Market Research.
Dark Reading
3 years, 7 months ago
Cybersecurity Pros Put Mastodon Flaws Under the Microscope
As the open source social media network blows up due to Twitter's troubles, researchers caution about vulnerabilities within the application.
The Register
3 years, 7 months ago
AWS fixes 'confused deputy' vulnerability in AppSync
Datadog security researchers found the flaw before miscreants did Amazon Web Services (AWS) fixed a cross-tenant flaw in AWS AppSync that could allow miscreants to abuse that cloud service to assume identity and access management roles in other AWS accounts, and then gain access to and control over those resources. …
The Hacker News
3 years, 7 months ago
Researchers Warn of Cyber Criminals Using Go-based Aurora Stealer Malware
A nascent Go-based malware known as Aurora Stealer is being increasingly deployed as part of campaigns designed to steal sensitive information from compromised hosts
Dark Reading
3 years, 7 months ago
MIT Research Documents Effectiveness of Consensus Cyber Risk Oversight Principles
Organizations that use the consensus principles can significantly improve their cyber resilience without raising costs, MIT research shows.
Dark Reading
3 years, 7 months ago
BlueVoyant Research Reveals Private Equity Portfolio Company Cybersecurity Challenges
New study identifies critical focus areas for portfolio companies to reduce cyber risks and costs associated with breaches.
Bleeping Computer
3 years, 7 months ago
Apps with over 3 million installs leak 'Admin' search API keys
Researchers discovered 1,550 mobile apps leaking Algolia API keys, risking the exposure of sensitive internal services and stored user information. [...]
Info Security Magazine
3 years, 7 months ago
New AXLocker Ransomware Steals Victims' Discord Tokens
Researchers also discover two additional new variants