SecurityWeek

Today's security consensus is that password-based authentication and access is insecure, and that some form of two- or multi-factor authentication is necessary. The simplest and easiest second factor is an SMS-based soft token, and that is the route already adopted by many organizations.

Microsoft’s latest desktop operating system release, which started rolling out to users in early August in the form of Windows 10 Anniversary Update, is packing improved ransomware resilience, the Redmond-based tech giant says.

A Dutchman accused of launching an unprecedented 2013 cyberattack that reportedly "nearly broke the internet" escaped jail Monday even though he was sentenced to some eight months in prison as most of the term was suspended.

The pivotal role of cybersecurity during the recent United States presidential election has underscored the critical need to focus on a  secure electoral process.

VMware informed customers on Sunday that it has patched a critical out-of-bounds memory access vulnerability affecting its Workstation and Fusion products.

Following the success of the “Hack the Pentagon” initiative, the United States Army has announced its intention to launch its first ever bug bounty program in the coming weeks.

Breach verification service LeakedSource claims it has obtained over 400 million user accounts stolen by hackers from social networking and multimedia entertainment company FriendFinder Networks, Inc.

When it comes to Internet of Things (IoT) devices, everything from smart glasses to connected cars is susceptible to malware infection if not properly secured, Fortinet senior researcher Axelle Apvrille said in a presentation at the DefCamp 2016 security conference in Bucharest, Romania this week.

Attorneys general in over a dozen U.S. states announced on Thursday that they reached a $1 million settlement with Adobe Systems over the massive data breach suffered by the company in 2013.

A Florida man is the latest person to be charged in connection with alleged illegal activities associated with coin.mx, a now defunct unlicensed bitcoin exchange. Riccardo Hill, a resident of Brandon, Florida was charged with conspiring to operate an unlicensed money transmitting business. He was released Thursday on a $75,000 bond following a court appearance in Manhattan.

RiskIQ, a company that helps detect digital threats stemming from areas such as the Web, malvertising and social media, announced that it has closed $30.5 million in a Series C funding round led by Georgian Partners. 

Job-related information belonging to hundreds of thousands of individuals was exposed online after Capgemini inadvertently made public a database of Michael Page, a brand of UK-based global recruitment company PageGroup.

Governments across the world are showing a contradictory attitude towards privacy and data protection. On the one hand new legislation insists that business is minutely protective of personally identifiable information (PII), while at the same time PII must be more readily handed to law enforcement.

Researchers warn that certain types of low bandwidth distributed denial-of-service (DDoS) attacks can cause some widely used enterprise firewalls to enter a temporary DoS condition.

Just hours after Donald Trump was elected president of the United States, researchers spotted a series of election-themed spear-phishing attacks aimed at think tanks and non-governmental organizations (NGOs) in the U.S.

Hollywood sure knows how to maximize value. That’s why we have long strings of sequels, prequels and movie plot reuse that stretch across generations. “Star Wars,” “Rocky,” “A Nightmare on Elm Street” or “Harry Potter,” take your pick. Which makes me wonder how many sequels will we have to “Snowden”?

Madison County, Indiana, was the victim of ransomware last week. There is no public information on what malware was used, how the authority was infected, nor how much was demanded by the attackers -- but it does seem as if the ransom has been paid, and systems are now coming back on line.

A new file-encrypting ransomware dubbed by researchers “Telecrypt” abuses the instant messaging service Telegram for command and control (C&C) communications and to allow victims to send messages to the attackers.

Canada based Casino Rama Resort said that a hacker broke into its internal computer systems and accessed detailed company, customer, employee and vendor information. 

Russia's antitrust authority on Thursday said it had opened an investigation into Microsoft for allegedly abusing its dominance in the antivirus software market. In a statement, the Federal Anti-monopoly Service said it had taken the decision after being contacted by the Moscow-based internet security giant Kaspersky.