SecurityWeek

A recent study conducted by Dimensional Research has revealed that most organizations don’t have a security strategy in place to protect the growing number of endpoints on their networks.

Internet of Things (IoT) devices with hardcoded default login credentials are being targeted by a newly discovered Linux malware, security researchers warn.

Google’s transparency report update for the first half of 2016 shows that the number of requests received by the search giant from governments has continued to increase.

Researchers from Cisco Talos have created a new tool that allows users to extract the configuration of the Locky ransomware.

Microsoft researchers have released a new tool designed to help security teams protect corporate networks by making it more difficult for attackers to conduct reconnaissance.

The OODA loop is a well established concept often used in security which originated in the military. OODA stands for Observe, Orient, Decide, Act.

Canada-based wireless communications equipment manufacturer Sierra Wireless has warned customers that some of its rugged gateway products can become infected with Mirai malware if not configured properly.

Blockchain, the developer of the world’s most popular Bitcoin wallet, suffered an outage this week after malicious actors breached the systems of its registrar and changed its DNS servers.The company reported on Wednesday that it had detected a DNS issue. It later learned that attackers had compromised its DNS registrar.

Verizon said Thursday the massive breach affecting 500 million Yahoo customers could have a "material" effect on the $4.8 billion deal to acquire key assets of the Internet group.

A newly observed ransomware family that was written in Python fetches a unique key for each of the victim’s files before encryption, Kaspersky researchers warn.

Flaw in Cisco Meeting Server Allows Hackers to Impersonate Legitimate UsersA critical vulnerability in one of Cisco’s enterprise video conferencing products allows remote attackers to impersonate legitimate users, the networking giant warned on Wednesday.

Password proliferation is bad, for many, many, many reasons. But the worst reason is that people tend to re-use passwords all over the place.

Cybercriminals have been exploiting an old SSH vulnerability and insecure configurations to abuse Internet of Things (IoT) devices for attacks aimed at Web services and internal networks.

A recently spotted spam campaign was using Message (.MSG) file attachments to infect users with the infamous Zbot banking Trojan, Trustwave security researchers say.

I can honestly say that spell check is the reason I now know how to spell “separate.” It only took about 20 years of patient and faithful repetition from Microsoft Word.

A high severity denial-of-service (DoS) vulnerability patched last month in the popular DNS software BIND has been exploited in the wild to crash systems.

Five years after the launch of its bug bounty program, Facebook says it has paid out a total of more than $5 million to the researchers who have helped the company find and patch vulnerabilities in its systems and products.

One of the Internet Explorer zero-days patched by Microsoft on Tuesday has been exploited in malvertising campaigns to help attackers avoid automated analysis systems and researchers.