SecurityWeek

U.S. Government Maps Election Hacks to Russian Threat Groups, But Industry Raises Concern Over Attribution Evidence

US President-elect Donald Trump on Thursday responded to a slew of US election related sanctions against Russia with a call for the country to "move on" and a conciliatory pledge to meet US spy chiefs he has harshly criticized.

President Barack Obama on Thursday unleashed a barrage of retaliatory measures against Moscow for meddling in the US election, imposing sanctions on two intelligence agencies, expelling 35 agents and shuttering two Russian compounds inside the United States.

The Organization for Security and Co-operation in Europe, an international election and war monitor, said Wednesday it had become the latest global institution to suffer a "major" cyber attack.The Vienna-based OSCE has its origins in the Cold War but after 1991 it expanded and now has 57 member states including the United States, Russia and Ukraine.

A new version of the Sundown exploit kit uses a technique called steganography to hide its exploits in harmless-looking image files, Trend Micro reported on Thursday.

Experts have determined that the remote code execution vulnerabilities affecting the PHPMailer and SwiftMailer email-sending libraries are caused by PHP design flaws.

Support for Windows XP and Vista will be removed from Firefox, currently the last major web browser out there to still support the two outdated operating system versions.

Topps this week sent out emails informing users that its website was hacked earlier this year and that personal information, including credit card data, was stolen.

The integration of the cloud into global Internet and business strategies is the critical next step towards our officially entering the Digital Age. Advances in how we gather, share, and consume information have not only transformed business, but also society itself. In fact, we are now so accustomed to change that we adopt it and adapt to it without a second thought. And we have to.

Ringing in a More Secure 2017

The Securities and Exchange Commission (SEC) on Tuesday charged three Chinese men for trading on information stolen from two prominent New York-based law firms they hacked in 2014 and 2015.

The U.S. Food and Drug Administration (FDA) has released guidance on the postmarket management of cybersecurity for medical devices, encouraging manufacturers to implement security controls that cover products throughout their entire life cycle.

British multinational hotel company InterContinental Hotels Group (IHG) has launched an investigation after being informed of a possible payment card breach at some of its properties in the United States.

PHP 7’s “unserialize” function is plagued by a series of vulnerabilities that could allow an attacker to take full control over affected servers, Check Point security researchers reveal.

A recently discovered variant of the KillDisk malware encrypts files and holds them for ransom instead of deleting them. Since KillDisk has been used in attacks aimed at industrial control systems (ICS), experts are concerned that threat actors may be bringing ransomware into the industrial domain.

New Leet Botnet Shows IoT Device Security Regulation May Become Necessary

This time every year I tell myself the same thing: “You’ve got to cut back on the drinking.” But I’m not about to listen to some weirdo who talks to himself. Yet, I want to make some kind of resolution! What’s left of the professional in me has some ideas about resolutions that we, as a security community, can make. Here are five.

Researchers at Kaspersky Lab have come across a new Android Trojan that hacks routers and changes their DNS settings in an effort to redirect traffic to malicious websites.

The number of attacks aimed at industrial control systems (ICS) increased by 110 percent in 2016 compared to the previous year, according to data from IBM Managed Security Services.The company has attributed this significant increase to brute force attacks on supervisory control and data acquisition (SCADA) systems.