SecurityWeek

WordPress users have been advised to update their installations to version 4.6.1, which fixes a couple of security flaws and over a dozen functionality bugs affecting previous versions.

There is a current extortion campaign that seems particularly focused in the UK. The threat is to deliver a DDoS attack together with ransomware infections if the victim does not pay a ransom in bitcoins. The ransom starts relatively low at just 1 bitcoin, but increases to 20 bitcoins if not paid within a certain time. The attackers claim to be the Armada Collective.

Malware’s success relies on the ability to remain stealthy, and the authors of malicious programs go to great lengths to make that happen, while also ensuring that their identity remains hidden. As a general rule, malware developers tend to avoid contact with security researchers to avoid stepping into the spotlight, but this rule can be broken occasionally.

DropboxCache, a Linux backdoor that was found earlier this year to have migrated to Windows, is targeting Mac OS X devices as well, Kaspersky Lab security researchers warn.

A report published this week by the U.S. House of Representatives Committee on Oversight and Government Reform said the data breaches disclosed by the Office of Personnel Management (OPM) last year were a result of culture and leadership failures, and should not be blamed on technology.

A researcher has shown how easy it is for hackers to steal credentials from locked Windows and Mac OS X computers using a small USB device.

St. Jude Medical has filed a lawsuit against MedSec and Muddy Waters, claiming that the companies made financially motivated false statements regarding the security of its medical devices.

Faced with a proliferation of security products and point solutions to combat increasingly sophisticated threats, it didn’t take long for companies to recognize that a certain amount of bench strength – knowledge and personnel – was required to manage unprecedented complexity and get the full value from these investments. Organizations turned to managed security service providers (MSSPs) to alleviate the burden of maintaining the health of these systems and responding to tickets.

Roughly six years after announcing that it would acquire security firm McAfee, Intel Corporation said it would spin off its security division as an independent company under the name McAfee.

A new variant of the Gugi mobile banking Trojan can bypass two of the security features that Google has included in Android 6.0, Kaspersky security researchers say.

America's intelligence chief on Wednesday said Russia hacks US computer networks "all the time," while also seeking to reassure the public the transition to a new president would "be OK."

Siemens has released firmware updates for some of its SIPROTEC products to address several medium severity vulnerabilities that can be exploited to bypass authentication and cause a denial-of-service (DoS) condition.

Hitsniffer's Downfall Highlights IP Problems over Code Ownership

U.S. computer maker Dell said Wednesday it completed the acquisition of data storage firm EMC, creating the largest privately held technology group with a range of computing services.

Researchers have analyzed the network management systems offered by several vendors and discovered that they are plagued by vulnerabilities that can be exploited for cross-site scripting (XSS) and format string attacks carried out over the Simple Network Management Protocol (SNMP).

US intelligence whistleblower Edward Snowden sought shelter among Hong Kong refugees after he leaked a huge trove of secret documents in the southern Chinese city, reports said Wednesday.

Researchers have identified several potentially serious vulnerabilities in products from network security solutions provider Fortinet. The vendor appears to have patched at least some of the issues.

A China-linked cyberespionage group has shifted its attention from the United States to Hong Kong, where it has targeted more than a dozen organizations over the past year.

Google this week released a new set of Android security patches, meant to resolve numerous Critical bugs in the mobile platform, including the recently revealed QuadRooter flaws.

Tens of thousands of devices running Cisco’s Adaptive Security Appliance (ASA) software are still vulnerable to attacks leveraging an exploit leaked by a group calling itself Shadow Brokers.