Data and Information Security

Data and Information Security | News, how-tos, features, reviews, and videos

After MongoDB, ransomware groups hit exposed Elasticsearch clusters

Over 600 Elasticsearch instances had their data wiped and replaced with a ransom message

Jan 13, 2017 3 mins

Cybercrime Data and Information Security Malware

GoDaddy revokes nearly 9,000 SSL certificates issued without proper validation

A bug in the CA's domain validation system for the past five months could have allowed attackers to obtain certificates without authorization

By Lucian Constantin

Jan 13, 2017 4 mins

Encryption Privacy Security

Professionally designed ransomware Spora might be the next big thing

The new ransomware program features strong offline decryption and a new payment scheme

By Lucian Constantin

Jan 11, 2017 5 mins

Encryption Malware Security

Disk-wiping malware Shamoon targets virtual desktop infrastructure

The latest variant of the cyber sabotage program has default credentials for a Huawei desktop virtualization solution

By Lucian Constantin

Jan 10, 2017 3 mins

Data and Information Security Malware Security

Dangerous assumptions that put enterprises at risk

Those who make assumptions -- trusting that solutions won't fail and users won't click -- could leave a company's assets vulnerable and lead to a breach

By Kacy Zurkus

Jan 10, 2017 7 mins

Authentication Cybercrime Data and Information Security

More than 10,000 exposed MongoDB databases deleted by ransomware groups

Five groups of attackers are competing to delete as many publicly accessible MongoDB databases as possible

By Lucian Constantin

Jan 6, 2017 2 mins

Cybercrime Data and Information Security Malware

Exposed MongoDB installs being erased, held for ransom

Administrators should check their MongoDB deployments before they’re wiped clean

By Steve Ragan

Jan 4, 2017 3 mins

Application Security Data and Information Security Malware

What 2017 has in store for cybersecurity

Donald Trump's administration seems to be the biggest concern

By Ryan Francis

Dec 30, 2016 17 mins

Data and Information Security Phishing Technology Industry

Encryption in 2016: Small victories add up

The move from SHA-1 to SHA-2, a Congressional victory over backdoors, and the rise of encrypted communications are leading us toward a more secure world

By Fahmida Rashid

Dec 28, 2016 10 mins

Encryption Security