Cybercrime in 2017 was a tumultuous year “full of twists and turns”, with new (but old) infection methods, a major return to social engineering, and ups and downs in ransomware. These conclusions come from the ‘Cybercrime tactics and techniques: 2017 state of malware’ report (PDF) published today by Malwarebytes. “We look at our own detection […]

A critical vulnerability that could allow a remote attacker to execute arbitrary code has been found in a component used by more than 100 industrial control systems (ICS) from tens of vendors. The flaw affects the web server component of 3S-Smart Software Solutions’ CODESYS WebVisu product, which allows users to view human-machine interfaces (HMIs) for […]

Vulnerabilities that could allow unauthorized file deletion, unauthorized command execution and authentication bypass impacted WD (Western Digital) MyCloud devices, Trustwave reports. The vulnerabilities were discovered in the MyCloud personal storage device and were reported to Western Digital last year. The company has already released a firmware update to address them. All of the issue were […]