SecurityWeek

A newly observed ransomware family that was written in Python fetches a unique key for each of the victim’s files before encryption, Kaspersky researchers warn.

Flaw in Cisco Meeting Server Allows Hackers to Impersonate Legitimate UsersA critical vulnerability in one of Cisco’s enterprise video conferencing products allows remote attackers to impersonate legitimate users, the networking giant warned on Wednesday.

Password proliferation is bad, for many, many, many reasons. But the worst reason is that people tend to re-use passwords all over the place.

Cybercriminals have been exploiting an old SSH vulnerability and insecure configurations to abuse Internet of Things (IoT) devices for attacks aimed at Web services and internal networks.

A recently spotted spam campaign was using Message (.MSG) file attachments to infect users with the infamous Zbot banking Trojan, Trustwave security researchers say.

I can honestly say that spell check is the reason I now know how to spell “separate.” It only took about 20 years of patient and faithful repetition from Microsoft Word.

A high severity denial-of-service (DoS) vulnerability patched last month in the popular DNS software BIND has been exploited in the wild to crash systems.

Five years after the launch of its bug bounty program, Facebook says it has paid out a total of more than $5 million to the researchers who have helped the company find and patch vulnerabilities in its systems and products.

One of the Internet Explorer zero-days patched by Microsoft on Tuesday has been exploited in malvertising campaigns to help attackers avoid automated analysis systems and researchers.

The latest variant of the notorious Cerber ransomware family is currently featured in several infection campaigns, security researchers warn.

Amazon has prompted some of its customers to reset their passwords after learning that these might have been used to secure other online accounts as well.

SAP this week released its monthly patches for October 2016 to resolve 48 vulnerabilities in its products, including 25 implementation flaws and 12 Missing Authorization checks.

Russian Foreign Minister Sergei Lavrov on Wednesday said that US claims Moscow is meddling in the American election process are "flattering" but baseless.

Recent reports of fraudulent account creation by employees at large banks to generate a boost in fees have raised many questions. How can such practices grow to such an immense scale?

Dell has patched several vulnerabilities in its SonicWALL Email Security product, including four high severity issues that can be exploited to take control of a system and intercept corporate emails.

Marcel Lehel Lazar, the 44-year-old Romanian national known online as “Guccifer,” has returned to Romania after being convicted in the United States on hacking and identity theft charges.

Microsoft’s latest security bulletins patch tens of vulnerabilities affecting the company’s products. Four of the 36 unique CVE identifiers cover flaws that have been exploited in the wild.

A new ransomware family has emerged that targets servers and encrypts files on network shares even if they haven’t been mapped to the infected computer.