Lucian ConstantinRomania Correspondent, IDG News Service

Lucian Constantin writes about information security, privacy, and data protection for the IDG News Service.

spying eye cyberespionage surveillance

Researchers dismantle decade-long Iranian cyberespionage operation

The infrastructure used by an Iranian cyberespionage group to control infected computers has been hijacked by security researchers.

symantec logo

Nasty flaws in Symantec security tools expose millions of computers to hacking

A Google security researcher has found high severity vulnerabilities in enterprise and consumer products from antivirus vendor Symantec that could be easily be exploited by hackers to take control of computers.

security code big data cyberespionage DDoS

Thousands of hacked CCTV devices used in DDoS attacks

Attackers have compromised more than 25,000 digital video recorders and CCTV cameras and are using them to launch distributed denial-of-service (DDoS) attacks against websites.

Digital Key, security, encryption

Bart ransomware shows it can be effective without sophisticated encryption

A new ransomware program called Bart is making the rounds and locks user files in password-protected zip archives.

The Internal Revenue Service's IRS tax filing form 1040.

IRS kills electronic filing PIN feature due to repeated attacks

After repeated attacks, the Internal Revenue Service has decided to retire a Web-based tool for obtaining PINs that taxpayers could use to file tax returns electronically.

20160224 stock mwc lenovo booth sign

Lenovo plugs severe security holes in PC support tool preinstalled on PCs

Lenovo has fixed two high severity vulnerabilities in its Lenovo Solution Center support tool that is preinstalled on many laptop and desktop PCs.

malware payment terminal credit card

GozNym Trojan turns its sight on business accounts at major US banks

A hybrid Trojan program created for financial fraud has started redirecting users of four large U.S. banks to rogue websites in order to hijack their accounts.

Digital Key, security, encryption

The number of corporate users hit by crypto ransomware is skyrocketing

The prevalence of ransomware programs, both those that encrypt data and those that don't, has exploded over the past two years, with companies being increasingly targeted.

code big data binary programming

Severe flaws in widely used archive library put many projects at risk

Researchers from Cisco Systems' Talos group found three severe flaws in libarchive that could impact a large number of software products and their users.

Web attack silently modifies DNS configurations in routers

Hackers sold access to 170,000 compromised servers, many in the U.S.

The market for hacked servers might be much larger than previously thought, with new evidence suggesting that hackers sold access to over 170,000 compromised servers since 2014, a third of them located in the U.S.

Apple fixes serious flaw in AirPort wireless routers

Apple has released firmware updates for its AirPort wireless base stations in order to fix a vulnerability that could put the devices at risk of hacking.

20160225 stock mwc ericsson booth security locks

5 things you need to know about password managers

New data breaches are coming to light almost weekly and they reveal a simple fact: many people still choose weak passwords and reuse them across multiple sites. Password managers offer a solution.

20151005 cisco headquarters sign

Flaws expose Cisco small-business routers, firewalls to hacking

Three models of Cisco wireless VPN firewalls and routers from the small business RV series contain a critical unpatched vulnerability that attackers can exploit remotely to take control of devices.

microsoft headquarters

Microsoft fixes critical flaws in Windows, IE, Edge, and Office

Microsoft has fixed over 40 vulnerabilities in its products Tuesday, including critical ones in Windows, Internet Explorer, Edge, and Office.

security code big data cyberespionage DDoS

Flash Player zero-day exploit is being used in the wild by a cyberespionage group

Adobe Systems is working on a patch for a Flash Player vulnerability that's currently being exploited in targeted attacks.