SecurityWeek

CryptWare has released an update for its “CryptoPro Secure Disk for BitLocker” tool after researchers discovered a couple of serious vulnerabilities that can allegedly be exploited to backdoor the system and steal sensitive data.

Saudi cyber experts held urgent talks on Tuesday after government facilities were hacked, official media reported. The cyber attacks "in recent weeks targeted government institutions and vital installations in the kingdom," the Saudi Press Agency reported, without identifying the targeted agencies.

Wi-Fi signals can be exploited to recognize keystrokes and a system that can do so has been already created, a newly published research paper reveals.

Three of today's biggest IT evolutions are digital transformation; a move from binary-based to probability-based security; and the search for a single seamless fabric for related areas of security. In new announcements its Oktane16 conference today, identity firm Okta seeks to cover all three within access management.

The official website for the BitTorrent client Transmission has once again been abused by cybercriminals to deliver a piece of malware designed to target OS X systems.

Google’s login page is plagued by a whitelist bypass vulnerability that could allow an attacker to redirect users to arbitrary pages or trick them into downloading malicious code, security researcher Aidan Woods claims.

Kaspersky Lab has confirmed that the Lurk cybercrime gang, whose members were arrested by Russian police this summer, developed and rented the notorious Angler exploit kit, which disappeared from the scene shortly after the arrests.

Russian-based hackers may have been responsible for two recent attempts to breach US voter registration databases in two states, raising fears Moscow is trying to undermine November's presidential election, US media said Monday.

The European Union Agency for Network and Information Security (ENISA) published The cost of incidents affecting CIIs – a review ‘of studies concerning the economic impact of cyber-security incidents on critical information infrastructures’.

Adversaries are getting smarter, more efficient, and consequently more successful at penetrating industrial networks. Statistics from a recent Booz Allen Hamilton survey reinforce this fact. The firm surveyed 314 organizations operating Industrial Control Systems (ICS) around the world, and revealed that 34 percent were breached more than twice in the last 12 months. In 2015, ICS operators reported more security incidents to U.S.

A flash alert issued by the FBI earlier this month warns that unknown threat actors targeted the board of election systems of two U.S. states using widely available security testing tools.

The Kelihos botnet has kept a low profile following takedown attempts a few years ago when it was highly active, but has shown significant spikes in activity recently, MalwareTech warns.

Roman Valerevich Seleznev, a 32-year-old Russian national known online as “Track2,” has been convicted by a federal jury in the United States for his role in a major hacking scheme that is estimated to have cost banks more than $169 million.

Kaspersky Lab has released updates for its consumer products to address several denial-of-service (DoS) and memory disclosure vulnerabilities identified by researchers at Cisco’s Talos group.

The malicious software used earlier this month to steal 12 million baht ($346,000) from ATMs at banks in Thailand might be a new ATM malware variant called RIPPER, FireEye researchers reveal.

The discovery of sophisticated spyware to infiltrate and remotely take control of iPhones without leaving a trace has put a spotlight on Israel's secretive surveillance industry, considered among the world's most advanced.

Medical device manufacturer St. Jude Medical (STJ) has denied that its products are plagued by serious vulnerabilities following a controversial disclosure by MedSec and Muddy Waters that forced the vendor to temporarily suspend trading.

Norway-based browser company Opera advised Sync customers on Friday to change their passwords after someone hacked the service and possibly accessed user data.