SecurityWeek

In my previous contribution I reviewed Apache Hadoop’s native support for HDFS Encryption, which allows sensitive data to be stored and encrypted on HDFS with keys protected by KMS access control lists.

Several products from industrial networking and automation solutions provider Moxa are plagued by a critical vulnerability. The vendor has released firmware updates for many of the affected devices.

A Linux Trojan that emerged more than a year ago is once again actively targeting routers in an attempt to install backdoors on them.

Following a Freedom of Information (FoI) request from endpoint security firm SentinelOne, it is suggested that 56% of UK universities have been the target of a ransomware attack in the last year.

Wildfire, a recently observed piece of ransomware targeting mainly users in Belgium and the Netherlands, has generated roughly $80,000 in payments for its operators in just a month, Intel Security and Kaspersky Lab researchers reveal.

Two browser hijackers were recently observed using a file-in-the-middle attack between browser shortcuts and the actual browser to redirect users to the sites of their choice, Malwarebytes researchers warn.

Recent cyberattacks targeting the World Anti-Doping Agency (WADA) have been linked by researchers to the notorious Russian threat actor known as Fancy Bear.

A gang of foreign criminals stole millions of baht by hacking a Thai bank's ATM network in a theft believed linked to a similar one in Taiwan, police said Wednesday.

Germany on Wednesday urged its population to stockpile food and water in case of terrorist or cyber attacks, as it adopted its first civil defense strategy since the end of the Cold War.

Researchers have demonstrated that the Cisco ASA exploit leaked recently by a group called Shadow Brokers can be leveraged for remote code execution against newer versions of the software as well.

Hackers with apparent ties to Russia have conducted a series of cyber attacks on US media outlets including the New York Times, CNN reported Tuesday.

The Hague - Police swooped in 28 European countries and arrested 75 suspects for sharing child sex images on the internet while investigating 207 cases across the continent, Europe's policing agency said Tuesday.

Videogame developer Epic Games informed customers on Tuesday that several of its forums have been breached. The hackers reportedly gained access to information associated with more than 800,000 user accounts.

Researchers with the University of North Carolina at Chapel Hill have demonstrated a new method of successfully bypassing modern face authentication systems.

News emerged last week that a hacking group known as The Equation Group had itself been hacked by a separate group known as the Shadow Brokers.

An application used in the transportation sector worldwide is plagued by a high severity SQL injection vulnerability. The hacker who discovered the issue released a proof-of-concept (PoC) exploit without informing the vendor and ICS-CERT says the flaw has already been exploited against organizations in the United States.

The GnuPG Project announced last week the availability of GnuPG and Libgcrypt updates that address a critical security problem affecting all versions released over the past 18 years.

Cybercriminals have discovered a new method of hiding their nefarious activity on compromised machines, by using virtual machines (VMs), SecureWorks researchers warn.

Threat intelligence platform provider ThreatQuotient  has secured $12 million in Series B funding Led by investment firm New Enterprise Associates (NEA). 

Juniper Networks has analyzed the implants leaked by Shadow Brokers and while it has confirmed that some of them target its products, the company has not found any evidence that they exploit a vulnerability.