SecurityWeek

A new ransomware family was recently observed being distributed under two different variants, including one that takes screenshots of a victims’ computer and sends them to the operator’s servers.

A newly observed Linux Trojan is capable of self-spreading through infected websites and can recruit the infected machines into a peer-to-peer (P2P) botnet, Doctor Web researchers warn.

Security researchers at IOActive have discovered multiple security vulnerabilities in the BHU Wi-Fi “uRouter,” a device that is manufactured and sold in China.

Today, even mid-sized organizations are dealing with thousands of vulnerabilities across their growing attack surface. Therefore, relying solely on existing intelligence provided by vulnerability scanners should only be a first step in a cyber risk management process. Without determining the risk associated with vulnerabilities, organizations often misalign remediation efforts and resources.

Gozi, one of the oldest banking Trojans out there, is using highly elaborated webinjects along with behavioral biometrics for fraud protection bypass in new campaigns targeting global brands, buguroo researchers warn.

Since mid-2015, Twitter has suspended 360,000 accounts for violating its policies related to promotion of terrorism, of which 235,000 accounts were suspended in the past six months.

A federal judge has ruled that Democrat Hillary Clinton must respond in writing in a lawsuit over her use of a private e-mail server while she was secretary of state.

Previously unpublished documents released by former National Security Agency contractor Edward Snowden confirm that some of the spy agency's top-secret code has been leaked or hacked, The Intercept reported Friday.

With Brazil currently hosting the 2016 Olympics, cybercriminals appear determined to profit from this major sporting event as much as possible, such as using banking Trojans that abuse PowerShell, Kaspersky Lab researchers reveal.

Dridex, one of the most prolific Trojans in recent years, is ramping up its activity once again, after coming to a near stop about two months ago, Proofpoint security researchers reveal.

Microsoft has been getting bad press over concerns with Windows 10. There are two primary reasons: firstly that the company is, or has been, overly aggressive in pushing the operating system on existing Windows users; and secondly that it plays fast and loose with user privacy.

The point of sale (PoS) systems at Eddie Bauer retail stores across North America were infected with malware between January 2, 2016 and July 17, 2016, the clothing store chain announced on Thursday.

The Locky ransomware has switched back to the distribution method it used when it first emerged in the wild, namely Office documents with malicious macros, FireEye researchers warn.

A popular brand of smart electrical sockets is plagued by several serious vulnerabilities that expose networks to remote attacks, Bitdefender researchers reported on Thursday.

A simple question that led to a SIEM-ple solution. Well, maybe not so simple.

The Olympics are such an inspirational time of year. Extraordinary athletes from around the world gather to attempt a lifelong goal of achieving Olympic gold, often the culmination of years or decades of tireless training and dedication. And, we at home get to sit back and watch the best competitors in the world perform amazing acts of athleticism. It’s an exciting time and one I always look forward to. 

During an internal security review, Cisco discovered that its Firepower Management Center product is plagued by several issues, including critical privilege escalation and command execution vulnerabilities.

Bitcoin.org, the organization that oversees the development of the Bitcoin software, has warned users that state-sponsored attackers will likely target the upcoming release.

Cisco, Fortinet and WatchGuard have analyzed the exploits leaked recently by a threat group calling itself Shadow Brokers. While Fortinet and WatchGuard determined that the vulnerabilities were patched several years ago, Cisco did find a zero-day in its products.