SecurityWeek

A recently analyzed Linux rootkit is being distributed via manual installations and targeting both Intel and ARM platforms, embedded platforms included, and provides attackers with complete control over the compromised devices, Trend Micro researchers warn.

I don’t know about you, but I’m rapidly closing in on twenty years in this industry. I’m blessed enough to have held a variety of jobs in the general security field, and worked through a long string of challenging roles that gave me perspective. Over that span of time, I’ve always tried to apply security like anything else – starting with the end in mind.

A newly observed Linux Trojan backdoor is actively targeting Internet of Things (IoT) devices and enjoying very low detection rate, even on systems using the x86 architecture, researchers say.

Nine months after researchers revealed that millions of devices are exposed to cyberattacks due to the reuse of cryptographic keys in their firmware, the number of impacted systems has increased considerably.

Yelp is looking to squash more of the bugs affecting its platform and applications, and it has just announced the launch of a public bug bounty program with payouts of up to $15,000.

HSBC bank has become the latest financial institution to adopt smartphone-based biometrics as a form of user authentication. Institutions already doing so include MasterCard (selfie), Barclays (voice) and Bank of Montreal (selfie or fingerprint). HSBC's chosen method is the selfie.

Google has signed up for the EU/U.S. Privacy Shield, which provides a set of enforceable protections for the personal data of EU individuals.

Sophos rushed to release an update over the weekend after system administrators started complaining that the security firm’s products had flagged a legitimate Windows file as malicious.

Hackers stole the details of nearly 100 million users from the Russian web portal Rambler in an attack that took place several years ago.

White House hopeful Hillary Clinton expressed "grave" concern Monday about reports that Russia has been interfering in the US electoral process through invasive cyber attacks on the Democratic Party.

Sundown, a relatively new exploit kit (EK), is outsourcing panel and Domain Generation Algorithm (DGA) coding work and stealing exploits in an attempt to improve its presence on the EK scene.

Redis servers that are exposed to the Internet are prone to attacks similar to the newly discovered FairWare ransomware, researchers reveal.

Researchers have found links between the recent cyberattacks on U.S. state election systems and previous operations targeting political and government organizations in Turkey, Ukraine and Germany.

A new variant of the popular Cerber ransomware has emerged that is being distributed via the Magnitude and RIG exploit kits

Recently observed malvertising campaigns leveraged the same redirection gate to take users from all around the world to the landing page of the Neutrino exploit kit, Cisco Talos researchers reveal.

When LeakedSource yesterday disclosed the account details of 43 million account details stolen from Last.fm in 2012, it commented that it was processing enough additional databases to publish one per day for several years. Today it has disclosed details from two bitcoin breaches: BTC-E.com (a bitcoin exchange) and Bitcointalk.org (a bitcoin discussion forum).

Hackers breached the systems of Canada-based point-of-sale (PoS) software provider Lightspeed and managed to gain access to customer information.

A 27-year-old computer programmer from South Florida has been charged and arrested for allegedly hacking into servers of the Linux Kernel Organization and the Linux Foundation. He is believed to be responsible for the 2011 breach of kernel.org servers.

Apple has released security updates for Mac OS X and Safari to patch zero-day vulnerabilities that were recently used to spy on individuals via iOS devices.