SecurityWeek

Researchers discovered that the open source webmail software Roundcube is affected by a critical vulnerability that can be used to execute arbitrary commands on the system simply by sending an email.

Facing mounting pressure to use their technological clout to curb the spread of jihadist propaganda, major US social networks have finally joined forces in an effort to curb "terrorist content."

HP announced this week several improvements to its Managed Print Services (MPS) in an effort to help organizations defend against attacks leveraging network printers.

Microsoft Introduces New Enterprise Security Capabilities With Windows 10 Creators Update

Vulnerabilities in hundreds of thousands of IP cameras render them susceptible to malware compromise, which could eventually result in them being ensnared into Internet of Things (IoT) botnets, Cybereason security researchers warn.

Municipal planners in Europe are embracing digital technologies to deliver various services to the citizens. Smart-city services connect Internet-enabled sensors on buses, in rental bike racks, or parking meters, and then make use of an app or SMS with the citizen’s smartphone for payment. But Europe’s rich hacking culture has makers and breakers poking and prodding at these new systems every day.

The infamous Locky ransomware has once again switched to a new extension to append to encrypted files, but reverted to malicious Office documents for distribution, security researchers have discovered.

Google this week released the December 2016 set of monthly patches for the Android platform which resolved a total of 74 vulnerabilities, 11 which were rated Critical severity.

(InfosecIsland) - Given the unforeseen results of the 2016 US Presidential election, it is hard to predict the future, particularly in sorting out campaign promises from policy intent.

News broke last week of a ransomware attack targeting the San Francisco Municipal Transport Authority (SFMTA, or 'Muni'), and security researchers have now taken a closer look at the malware used.

The Presidential Commission on Enhancing National Cybersecurity last week published a set of recommendations aimed at strengthening cybersecurity across the public and private sectors.

Trying to Focus on Everything at Once is the Same as Focusing on Nothing at All...

Approximately 100,000 UK TalkTalk and Post Office ISP users were affected by the recent Mirai attack that severely affected nearly a million Deutsche Telekom customers in Germany in late November. It was assumed that the UK victims were the outer ripples of the primary attack; and this was confirmed by a subsequent report that quoted the Mirai developer as apologizing for the effect on the Post Office.

The 2017 Global Cybersecurity Assurance Report Card shows a six point fall from last year's rating -- down from 76% to 70% (marked as C-). Although organizations' confidence in mitigating threats is constant at 79% (C+), confidence in the ability to assess risks has tumbled 12 points from 73% to 61% (D-).

The most common vulnerabilities used by exploit kits in the past year affect Flash Player, Windows, Internet Explorer and Silverlight, according to a report published on Tuesday by threat intelligence firm Recorded Future.

EU and US consumer watchdogs announced Tuesday they are filing complaints against a clutch of smart toys that can "spy" on children and their homes, for allegedly breaching privacy and data protection laws.

Optiv Security, the cyber security company formed as a result of the merger of Accuvant and FishNet Security, today announced that private equity giant Kohlberg Kravis Roberts & Co. (KKR) will acquire a majority stake in the security firm.

I’m often asked why I run a team entirely dedicated to researching, developing and implementing various program frameworks – when so many security organizations get by just fine without them. However, the phrase “get by just fine without them” is part of the answer. The challenge with helping security leaders and professionals understand why what they’re doing requires a model to follow when there are few visible consequences to simply winging it.

Russian President Vladimir Putin on Tuesday signed off on a broad-ranging plan aimed at bolstering the country's defenses against cyberattacks from abroad and cracking down on perceived foreign influence.

Sony has released firmware updates for many of its security cameras to address a critical vulnerability that can be exploited to take control of the devices, including by botnets such as Mirai.