SecurityWeek

Some of the most profitable movies

The PayPal-owned free digital wallet service Venmo was plagued by some serious vulnerabilities that could have been exploited to steal money from users’ accounts.

A hacker claims to possess 200 million Yahoo user accounts and he is offering to sell the information on a dark web cybercrime marketplace for a few Bitcoins.

As a new feature to its Google Account service, Google said it would now alert users via their smartphone or tablet when new devices are added to their accounts.

Industrial cybersecurity startup CyberX announced today that it has raised $9 million in new funding to help expand its business and solutions designed to protect the Industrial IoT.

Charlie Miller and Chris Valasek, the researchers who last year showed that cars can be remotely hijacked, are back with a new demonstration, and this time they managed to take over a vehicle’s acceleration, brakes and steering.

Mozilla on Monday announced that download protection in Firefox 48 has ben expanded to include potentially unwanted software and uncommon downloads.

Google on Monday announced new security patches for the Android operating system, focusing mainly on resolving a series of critical bugs in drivers, some that had been reported years ago.

Kaspersky Lab Launches New Bug Bounty Program on HackerOne Platform

Researchers from two security firms have uncovered evidence linking a Russian threat actor to the cyberattack targeting the U.S. Democratic Congressional Campaign Committee (DCCC).

A newly spotted Android Trojan managed to infect over 150 applications in Google Play, for a total of more than 2.8 million downloads, Doctor Web security researchers warn.

Nuance Powers New Telephone Banking Voice Authentication System for Barclays

A long-running exploit kit (EK) campaign has recently switched to distributing the Locky ransomware via the Neutrino EK, Palo Alto Networks researchers reveal.

Organizers of the Black Hat conference have updated the event’s iOS and Android applications after researchers at mobile security firm Lookout discovered several flaws that could have been exploited to impersonate users and spy on them.

Microsoft recently disabled the cloud sync feature in SwiftKey after an issue resulted in user details being displayed to other people.

A bug bounty hunter has disclosed a series of vulnerabilities that he claims gave him complete access to a production database of the online image sharing community Imgur.

Starting in Windows 10 version 1607, new kernel mode drivers will not be loaded unless they have been signed by Microsoft, the company announced.

DHS Explains Process of Reporting Cyber Incidents to the Federal Government

A Nigerian behind an online fraud network which engineered scams worth more than $60 million (54 million euros) has been arrested in southern oil city of Port Harcourt, Interpol said on Monday.

Intel has released updates for its Crosswalk framework to address a serious vulnerability that exposes mobile applications to man-in-the-middle (MitM) attacks.