SecurityWeek

An 18-year-old teen from Arizona was arrested this week after one of his iOS exploits caused serious disruption to 911 emergency systems.

The Department of Justice this week accused a total of 61 individuals and entities for their presumed involvement in a call center scam targeting tens of thousands of individuals in the United States.

A new zero-day distributed denial of service (DDoS) attack vector could open the flood gates for terabit-scale DDoS events, researchers at Corero Network Security warn.

Apple has updated its Xcode integrated development environment (IDE) and the Windows versions of iTunes and iCloud to address a dozen vulnerabilities affecting these products.

DynDNS (or just Dyn now) got blasted with #DDoS twice last Friday. Since Dyn is the major DNS provider for Twitter, Github, and Spotify, the knock-on effects have had a global reach. Here’s a rather comical exchange among typical users scratching their heads Friday morning:

To say that the 2016 U.S. Presidential election cycle has been unusual would be an understatement for a number of reasons. As a security professional, what stands out is the steady stream of cyber security-related incidents, particularly when compared to the U.S. elections of 2012 and 2008.

Ryan Collins, 36, of Lancaster, Pennsylvania, was sentenced to prison on Wednesday for hacking into over 100 online accounts, including many belonging to celebrities. Private pictures and videos stolen from these accounts were later leaked online in what became known as “The Fappening” or “Celebgate.”

The threat actor behind a cyber espionage campaign that has been known to target users in Taiwan has recently set sights on Japan, according to researchers at Trend Micro.

Microsoft this week announced boosted customer security with a new feature in Office 2013: the ability to block risky macros.

A threat group believed to be located in Palestine has been targeting users in Palestine and other Middle Eastern countries in a series of unsophisticated attacks whose main goal appears to be espionage.

Cisco announced on Wednesday that it has released software updates for its Email Security Appliances (ESA) to address a total of nine vulnerabilities, including denial-of-service (DoS) and filter bypass issues.

Industrial cybersecurity firm Nozomi Networks has raised $7.5 million in a Series A funding round, the company announced this week at SecurityWeek's 2016 ICS Cyber Security Conference, Atlanta. It separately announced the latest release of its SCADAguardian ICS security product. 

Adobe has released a Flash Player update to patch a critical vulnerability that malicious actors have been exploiting in targeted attacks.

VMware has patched a couple of moderate-severity information disclosure vulnerabilities affecting some of the company’s Mac OS X products.

Security has evolved to the point that I can now say that collection, sensing, and alerting are yesterday’s news. How can I make such a provocative statement? Wikipedia. Confused? That’s certainly understandable. I’ll explain.

Researchers who took part in the 2016 Mobile Pwn2Own competition in Tokyo, Japan, earned hundreds of thousands of dollars in rewards after successfully hacking Apple’s iPhone 6S and Google’s Nexus 6P phones.

Passwords. The favorite topics of security pundits. This fundamental component of security is one of our favorite things to talk about, hypothesize about, and much like the mainframe – proclaim its demise. Sadly, at the rate we’re going passwords (much like roaches) will be around long after many of us have retired and moved on. So there you have it, passwords are the cockroaches of the security industry.

Pagers are still used in industrial environments and many organizations don’t realize that the messages sent with these devices can be highly useful to malicious actors looking to launch a targeted attack.

There are several theories and claims as to who might be behind the distributed denial-of-service (DDoS) attacks launched last week against DNS provider Dyn, but researchers believe the attacks were actually launched by script kiddies.