A newly discovered exploit kit (EK) is being employed in live attacks despite the fact that it’s still in an unfinished state, Trend Micro’s security researchers reveal.
Hi, what are you looking for?
SecurityWeek
Latest News
A Long Island firm sold tens of millions of dollars in Chinese-made surveillance and other sensitive security equipment to customers, including the U.S. military to use on aircraft carriers, by falsely claiming the goods were manufactured in America, federal prosecutors said Thursday.
Pwn2Own Tokyo 2019 has come to an end and on the second day of the hacking contest bug bounty hunters have earned a total of $120,000 for demonstrating exploits against Samsung Galaxy S10 and Xiaomi Mi9 phones and TP-Link AC1750 routers.
A new set of security patches that Cisco released this week fixes multiple vulnerabilities across products such as Small Business Routers, TelePresence Collaboration Endpoint, RoomOS, and others.
Saudi Arabia's King Salman hosted the Central Intelligence Agency's director Thursday, state media said, after three people were charged in the US with spying on Twitter users critical of the royal family.
Ecommerce fraud prevention solutions provider Riskified has raised $165 million in a Series E funding round at a valuation of over $1 billion.
Google this week announced a partnership with several security solutions providers, aimed at fighting bad applications in the Android ecosystem.
Digital innovation is changing every aspect of how organizations conduct business. But nowhere has its impact been felt more acutely than among the security team. Those teams, already grappling with serious challenges due to the growing cybersecurity skills gap, are being tasked to secure an ever-expanding network footprint.
California's attorney general on Wednesday accused Facebook of failing to provide a slew of information subpoenaed in a probe of its privacy practices begun last year in the wake of the Cambridge Analytica scandal.
NVIDIA this week released software security updates to address multiple vulnerabilities in GPU Display Driver and GeForce Experience.
A graphical user interface (GUI) is now available for Kamerka, the open source reconnaissance tool that allows users to identify internet-exposed industrial control systems (ICS) and Internet of Things (IoT) devices.
Leaked documents from a civil suit against Facebook show how the social network aimed to employ user data as a tool for bargaining and to manipulate competitors, NBC News reported on Wednesday.
Two former Twitter employees and a third man were charged in San Francisco Federal Court Wednesday with spying on Twitter users critical of the Saudi royal family, the US Justice Department announced.
A vulnerability discovered in multi-format archive and compression library libarchive could lead to arbitrary code execution. The compression library is mostly known for being used in software to copy files to and from archives, to create archives, and compress and expand data.
There’s More to a Passwordless Future than Adopting Standards and Choosing Authentication Methods
White hat hackers have earned a total of $195,000 for demonstrating vulnerabilities in TVs, routers and smartphones on the first day of the Pwn2Own Tokyo 2019 contest taking place these days alongside the PacSec conference.
The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.
Application Security
Join SecurityWeek today for a virtual summit exploring the strategies and tools organizations need to discover, prioritize, and defend their expanding attack surfaces.
Application Security
Application Security
Application Security
Cloud Security
A total of 22 patches were releaased, a majority for code execution, privilege escalation, and information disclosure vulnerabilities.
Cloud Security
Artificial Intelligence
Cloud Security
ICS/OT
The Coast Guard confirmed evidence of malicious cyber activity on the VL Prosperity, but has not attributed the attack to Iran.