SecurityWeek

Industrial, engineering and other types of organizations from around the world have been targeted in a profit-driven campaign dubbed by Kaspersky Lab “Operation Ghoul.”

A new report on the cyber security skills shortage from Kaspersky Lab provides few new insights and no new solutions to the problem -- but it does prompt an important question. It confirms that organizations are seeking to increase their security headcount and it confirms the shortage of new security talent to enable this; but it doesn't offer any real solution.

The US National Security Agency, which gained international notoriety in 2013 after Edward Snowden revealed its data snooping techniques, has itself become the target of an apparent data breach.

I have had the privilege of meeting some great security analysts during my time in the information security profession.  One thing I experienced when I was an analyst, and that I’ve repeatedly noticed across the industry since then, is that even the best analysts need focus.  Analysts that are focused on high fidelity, low noise alerts and the right workflow accompanying them are far more productive than analysts that are not.  What do I mean by this?  Allow me

A recently spotted backdoor Trojan abuses the legitimate TeamViewer remote access tool to spy on victims, Doctor Web security researchers warn.

Social Blade, an online analytics company based in Raleigh, North Carolina, was hacked earlier this month and its users’ details, including passwords, have been leaked online.

Towards the end of July 2016, the National Institute of Standards and Technology (NIST) started the process of deprecating the use of SMS-based out-of-band authentication. This became clear in the issue of the DRAFT NIST Special Publication 800-63B, Digital Authentication Guideline.

Recent news coverage has not been kind to the Secret Service, but when it comes to the organization’s core mission – protecting the President – it is hard to argue with its record.

Products from Apple, Microsoft, Oracle and possibly other major companies are affected by a vulnerability that exposes connections made via a proxy server to man-in-the-middle (MitM) attacks.

Chrome, Firefox and other web browsers are plagued by vulnerabilities that can be exploited to spoof their address bar. Some of the affected vendors are still working on addressing the issues.

Windows 7 and Windows 8.1 users who miss their security updates for a month or longer will soon be able to install a single "Monthly Rollup" package to get both the missed and current software patches. The new patching method will be available starting in October.

Panda Banker, an offspring of the infamous Zeus malware, was recently observed in a massive infection campaign where millions of spam messages were sent to potential victims, Proofpoint researchers warn.

Has the Bear Raided the Eagle's Nest?

A new version of the Vawtrak banking Trojan includes some significant improvements, such as a domain generation algorithm (DGA) and additional protection for command and control communications.

Operators behind the Cerber ransomware are currently running 161 active campaigns, which generate an estimated $2.3 million in annual revenue, according to a new report from Check Point and IntSights.

Researchers have found yet another method for bypassing the User Account Control (UAC) security feature in Windows by leveraging a legitimate tool.

Early in the 20th century, the pioneers of psychology, Sigmund Freud and Pierre Janet introduced the revolutionary concept of an “unconscious” or “subconscious” mind. The idea was that we have a “mind-within-the-mind,” an underlying consciousness keeping track of all the things just under the surface of our consciousness that we didn’t have room for, or didn’t want to acknowledge, during our waking day.

A recently disclosed Linux kernel vulnerability caused by a TCP feature affects nearly 80 percent of Android devices, according to mobile security firm Lookout.

The University of California San Diego (UCSD) has developed a technique that it claims will be able to detect hardware trojans that might be introduced to a chip design during its progress along the manufacturing supply chain. The complexity of modern chips, some containing in excess of 1 billion transistors, combined with the globalization of the manufacturing process makes this a very real threat.