SecurityWeek

Twenty Organizations Were Analyzed in a Recent Study; All 20 Were Already Unknowingly Compromised

One year after saying that certificates using the SHA-1 hash algorithm should be kept alive in older browsers, Facebook is finally ready to retire the insecure cryptographic hash function and move to strong

Miscommunications Between Security Teams and DevOps Teams Put Your Business at Risk

New evidence uncovered by researchers after the group calling itself “Shadow Brokers” made available some new files reinforces the theory that the exploits and tools were obtained from a rogue insider and not by hacking NSA systems.

A cyberattack may have caused the power outage that occurred in Ukraine late on Saturday, according to the country’s national energy company Ukrenergo.

Internet infrastructure giant Akamai Technologies announced on Monday that it has acquired bo

Three Romanian men have been indicted in the United States for their involvement in a longstanding online fraud operation that resulted in estimated losses of up to $35 million.

After seeing its stock price decline significantly over the past year, along with a major executive leadership change, FireEye has unveiled a series of new products and global partnerships that should help improve its position in the cybersecurity solutions market.

WordPress security firm Wordfence has warned that the number of brute force attacks aimed at WordPress websites has increased significantly in December compared to the previous period.

Mirai, the distributed denial of service (DDoS) botnet that leverages the power of Internet of Things (IoT) devices, is improving resilience by switching to .Onion domains, after briefly flirting with its own Domain Generation Algorithm (DGA).

Given the security events of 2016, coupled with the rapid advancements and adoption of cloud computing, 2017 will be the year in which many finally accept that network infrastructure and security will have to be rethought from the ground up.

Kaspersky Lab on Friday shared details of a targeted attack campaign against industrial organizations that began in late summer and is still ongoing.

A 'mere' 10.8% phishing success rate has forced Los Angeles County to notify approximately 756,000 individuals that their personal information may have been compromised. The attack occurred on May 13, 2016 when 1,000 County employees received phishing emails. 108 employees were successfully phished.

Apple recently addressed a vulnerability in its macOS operating system that can be exploited by an attacker to obtain a MacBook’s FileVault password using a $300 device.

Attackers can chain a couple of serious flaws affecting Nagios Core to gain complete control of systems running vulnerable versions of the product, a researcher has warned.

Lynda.com, the online learning platform acquired last year by LinkedIn for $1.5 billion, started notifying customers over the weekend that a database containing user information had been accessed by an unauthorized third party.

TrickBot, the Dyre-linked Trojan that emerged in October 2016, is now targeting users in Singapore, India and Malaysia, IBM X-Force security researchers warn.

Researcher reveals 0-day linux exploit leveraging SNES. The full 0-day drive-by exploit was tested to work against Fedora 25 + Google Chrome and Ubuntu 16.04 LTS.

After a failed attempt to sell stolen exploits from the National Security Agency at an auction just months ago, the hacker group calling itself Shadow Brokers has decided to sell them directly via a new website.