SecurityWeek News

A new piece of malware dubbed Petya is making the rounds, and taking the threat of ransomware beyond simple file encryption activities.

Surveillance cameras sold by more than 70 vendors worldwide were found to be vulnerable to Remote Code Execution (RCE) because of shared firmware code,...

The website of security certification provider EC Council, best known for its Certified Ethical Hacker program, has been serving the Angler exploit kit (EK)...

Cyber-Attacks Expected After Islamic Terrorist Attacks in Belgium

Financial Trojan detections have registered a 73 percent drop in 2015 when compared to the previous year, a new report from Symantec reveals.

In an effort to counter the use of malicious macros to deliver malware, Microsoft has packed a new macro blocking feature into Office 2016.

Yahoo has expanded its password-free approach to user security to more applications for Android and iOS devices, namely Yahoo Finance, Fantasy, Messenger, and Sports.

Popular certificate authority StartSSL (StartCom) has resolved a security vulnerability in its domain validation process that could be abused by attackers to issue certificates...

Google has released an emergency security patch to address a local elevation of privilege vulnerability in the Android kernel that affects certain devices.

Symantec has released an update for its Symantec Endpoint Protection (SEP) to resolve three High risk security vulnerabilities in the product.

With just 5 percent of web servers correctly implementing HTTP Strict Transport Security (HSTS), the remaining 95 percent are vulnerable to trivial connection hijacking...

Encrypted email provider ProtonMail announced the global availability of its privacy focused email service to the public this week.

A fairly new piece of ransomware has been found leveraging pen-testing/attack tools for a more targeted approach of getting installed on compromised systems, Microsoft...

A recent malvertising campaign leveraging the Angler exploit kit (EK) has hit many top websites, including news sites, entertainment portals, and political commentary sites.

Last week, distributed denial of service (DDoS) protection company Staminus was breached in an attack that appears to have impacted roughly 2,300 current and...

A Pennsylvania man was charged on Tuesday for accessing the Apple and Google email accounts of over 100 people, including several celebrities.

A flaw in the command and control (C&C) server used by Radamant ransomware has allowed researchers to trick the malware into decrypting victim’s machines for free,...

A new variant of the EDA2 educational ransomware has emerged, only to be quickly neutralized, despite its creator’s confidence that he would never get...

Vulnerability in Samsung’s SW Update Tool Exposes Systems to Man-in-the-middle AttacksSamsung has released an update for its SW Update Tool that resolves a man-in-the-middle...

Hackers Leak Customer Data From DDoS Protection Firm Staminus Distributed denial of service (DDoS) protection company Staminus was breached last week, when attackers managed...