SecurityWeek

WikiLeaks has published a document detailing “Elsa,” a tool allegedly used by the U.S. Central Intelligence Agency (CIA) to track people’s locations via their laptop’s Wi-Fi.

Legacy Windows XP systems used by public authorities in the UK remains a concern. The WannaCry outbreak last month followed by the current 'NotPetya' outbreak -- both using a vulnerability patched in newer versions of Windows, but initially unpatched in XP -- highlights the problem.

The Shadow Brokers has sent out its first round of exploits and data as part of a recently announced monthly subscription service, and the group claims it has a significant number of subscribers.

Petya/NotPetya Ransomware May Not be a Financially Motivated Attack, Researchers Say

Companies in the video game industry and possibly other sectors have been targeted in attacks involving improved variants of the notorious PlugX remote access trojan (RAT).

Content delivery network and cloud services provider Akamai announced on Tuesday the launch of a new product designed to protect enterprises against malware, phishing and data exfiltration attempts through the analysis of DNS requests.

Israel's Mossad spy agency is starting a fund to invest in technology firms creating products that could assist its work, including those involving robotics and encryption, the prime minister's office said Tuesday.

The European Commission (EC) has levied a €2.42 billion ($2.73 billion) fine against Google because it "has abused its market dominance as a search engine by giving an illegal advantage to another Google product, its comparison shopping service." 

Organizations worldwide are currently under a cyber-attack involving what was originally believed to be the year-old Petya ransomware, but now is being called "NotPetya" and seems to be a never before seen ransomware family.

Cisco is getting ready for a new journey in cyber insurance, and Apple will be part of it, the company announced this week.

Ukraine's central bank on Tuesday said a cyberattack hit several lenders in the country, hindering operations and leading the regulator to warn other financial institutions to tighten security measures.

Cloudflare Launches New Website App Store and Partners With Venture Firms to Launch $100 Million Development Fund

China has pledged not to carry out state-sponsored cyberattacks against the intellectual property of Canadian firms, the two sides said Monday.The agreement was reached as part of ongoing bilateral security and trade talks.

Russian state oil giant Rosneft said Tuesday that its servers had suffered a "powerful" cyberattack, but insisted that production had not been hit."A powerful hacking attack has been carried out against the company's servers," Rosneft said on Twitter.

The FBI has published its Internet Crime Report 2016 based on information received by the Internet Crime Complaint Center (IC3). It shows that 298,728 complaints were received by the IC3 during 2016 (up from 288,012 in 2015); and that reported losses to internet crime totaled more than $1.45 billion (up from $1.07 billion in 2015).

Google on Friday announced plans to stop scanning the content of consumer Gmail addresses for personalizing the ads it serves to users.

A portion of Microsoft’s Windows 10 source code was leaked online this week on an enthusiast website that tracks Windows releases.

As teams work to shore up their incident response procedures, both sophisticated cyber war games and simple rehearsals will be essential tools for their security operations.  

At Cisco Live, Las Vegas Monday, IT analytics firm Corvil announced the integration of its Security Analytics with the Cisco Tetration Analytics platform. The intention is to combine Corvil's realtime packet-level analysis with Tetration's vast big data repository of downstream application-level data flows to provide an early, rich, granular and consistent detection of anomalous communications indicative of compromise.

Several government websites in the US states of Ohio and Maryland had to be shut down Sunday after being hacked to display messages supporting the Islamic State group.Among the affected websites was one belonging to Ohio Governor John Kasich.