SecurityWeek

More than 900 million Android devices that use Qualcomm chipsets are exposed to a set of four vulnerabilities called QuadRooter, Check Point security researchers warn.

An Italian malware author going by the name "z3r0" is currently offering a remote access Trojan for as low as $58, according to researchers at Symantec.

Network video recorders from surveillance solutions provider NUUO and networking company Netgear are plagued by several unpatched vulnerabilities, researchers and the CERT Coordination Center warned last week.

Vulnerabilities found by a researcher in smart thermostats developed by Trane could have been exploited by remote attackers to hack into the devices and perform various actions. The vendor has taken steps to address the security flaws.

A researcher has discovered several security issues in the Samsung Pay mobile payment service, including a vulnerability that can be exploited to make fraudulent transactions.

A sophisticated cyber espionage group that has managed to keep a low profile has been found to target organizations in Russia, China and a couple of European countries, Symantec reported on Sunday.

An updated version of the Cerber ransomware family is making the rounds, using a new file extension and rendering previous decryption tools useless.

SAP’s Monthly Patches Dominated by Hot News and High Priority Flaws

A newly discovered PoS (Point-of-Sale) malware can bypass computer defenses such as User Account Control (UAC) by posing as a legitimate Microsoft application, Doctor Web researchers have discovered.

An advisory published by VMware on Thursday describes two important vulnerabilities that affected several of the company’s products.

The Zeus Trojan variant known as Panda Banker has zone in on targets in Brazil, where it focuses on 10 local banks and various payment platforms, IBM X-Force researchers warn.

Consulting giant Accenture has announced a new partnership with Palo Alto Networks (PAN), Splunk and Tanium, with the goal of providing an integrated security solution that covers the primary bases swiftly and efficiently.

As a defender, your mission is to reduce the impact of cyber threats to your organization. A good day means that the organization was not impacted by a cyber event.

Forty Chinese and Taiwanese nationals held in custody since December 2014 were acquitted of running a cybercrime cell from an upmarket Nairobi suburb on Friday and will be deported.

A cyber espionage campaign has been discovered apparently targeting participants in the recent Permanent Court of Arbitration case brought by the Philippines against China over Chinese claims of sovereignty in the South China Sea. The case was found against China last month. China itself did not accept the validity of the case, did not attend the arbitration, and has since rejected the ruling.

Adobe’s Flash Player might be the most targeted product when criminal exploit kits are involved, but Microsoft products such as Office, Windows and Internet Explorer take center stage when Russian advanced persistent threat (APT) groups are involved.

The Philippines Central Bank on Friday handed a local bank a record $21 million fine after it was used by hackers to channel millions of dollars stolen from Bangladesh into local casinos.

Microsoft announced on Thursday that it’s offering up to $15,000 to researchers who find remote code execution vulnerabilities in the company’s Edge web browser running on Windows Insider Preview builds.

Black Hat USA 2016 – Researchers have demonstrated how fraudsters can make ATMs spit out tens of thousands of dollars in cash in just a few minutes by using data stolen from EMV cards.

Black Hat USA 2016 – Apple announced on Thursday its intention to launch a bug bounty program that gives a select group of researchers the opportunity to earn up to $200,000 for finding vulnerabilities in the company’s products.