SecurityWeek

Shark, a newly observed type of ransomware, is available for free on underground forums, but its authors demand a 20% cut of the profits, security researchers say.

UK business software firm Sage has issued a statement indicating that it has suffered an 'unauthorized access', potentially compromising the records of close to 300 customers.

A vulnerability affecting programmable logic controllers from Rockwell Automation can be exploited by attackers to gain control of affected devices. While the security hole is not easy to address, the vendor has provided some mitigation advice.

Facebook has announced the winner of its 2016 Internet Defense Prize. This year, the $100,000 reward went to a team of researchers whose work has focused on post-quantum security for TLS.

A new Locky ransomware variant sold by Brazilian malware developers has been delivered to targeted organizations using Windows script (WSF) files, Trend Micro warned on Sunday.

HEI Hotels & Resorts informed customers on Sunday that 20 of the hotels it operates in the United States are affected by a security breach involving payment card information.

The cybercrime gang that breached the systems of Oracle-owned point-of-sale vendor MICROS has reportedly also targeted several other similar companies.

The latest version of the Shade ransomware is no longer limited to only encrypting user’s files, but it also installs remote access tools on the infected computers, Kaspersky Lab researchers warn.

Researchers have identified yet another attack method that can be used to silently exfiltrate data from air-gapped computers. The latest technique involves the noise emitted by hard disk drives and it’s relatively efficient over short distances.

A cyber-espionage campaign operating for more than eight months has been linked to an Indian Advanced Persistent Threat (APT) group known as Patchwork, which might be the same attackers behind Operation Hangover, Forcepoint researchers warn.

Google this week added new alerts to Gmail to improve the security of its users by informing them when messages can’t be authenticated and when they contain dangerous URLs.

Researchers have come across a document exploit generator that has been used over the past few years by several threat actors to deliver malware in cyber espionage campaigns.

Taiwan-based networking equipment manufacturer D-Link has released firmware updates for several of its DIR model routers to address a serious vulnerability discovered by a researcher.

Microsoft has released yet another patch for a serious Windows authentication bypass vulnerability first disclosed by researchers nine months ago.

Starting this week, the RC4 cipher is disabled in Edge (Windows 10) and Internet Explorer 11 (Windows 7 and newer), bringing Microsoft’s browsers in line with Chrome and Firefox.

Pakistan on Thursday approved a controversial cybercrime bill the government says will safeguard citizens against harassment and criminalize online child pornography, but which activists say curbs free speech.

Less than ten minutes driving west from my home, you encounter a vast expanse of large, windowless buildings. Situated near them are impressive physical plants dedicated to cooling these buildings and providing back-up power in the case of a power failure.

A researcher has earned a significant bug bounty after finding a severe vulnerability in Facebook’s Rights Manager copyright management tool.

A set of malicious applications that recently slipped into Google Play might have infected up to 3,000 devices to date, Intel security researchers have discovered.