SecurityWeek

A Romanian national has been sentenced by a court in Florida to 70 months in prison and three years of supervised release for his role in an ATM skimming operation.Sorin Condrache, 36, had pleaded guilty to one count of conspiracy to defraud a financial institution and one count of possession of device making equipment.

Seoul prosecutors on Monday accused North Korea of hacking into the email accounts of dozens of South Korean government officials this year, the latest in the series of suspected cyber attacks by Pyongyang.

The Russian secret service on Saturday said it uncovered a planned cyber attack against some two dozen government and military organisations. In a statement, the feared FSB said it had detected malware "intended for use to spy online on some 20 institutions in Russia".

Democratic Party officials said Friday they have been targeted by a fresh cyber attack, similar to a breach at the Democratic National Committee that resulted in an embarrassing leak of party emails.

The XTunnel malware that was used by Russian APT threat actor Fancy Bear to penetrate the Democrat National Committee (DNC) network was specifically designed to work against this target, Invincea researchers say.

QRLJacking is the term given to a new social engineering method of compromising the QR Login process. QR Login had previously been considered both a secure and simple method of remote authentication. A new proof of concept now shows that the process is susceptible to relatively simple hijacking.

In an attempt to improved the security of Android, Google is looking into integrating the latest Linux kernel defenses into the next version of the popular mobile operating system. 

Security firm Blue Coat has analyzed thousands of cloud applications used by organizations and determined that a large majority of them fail to properly protect sensitive enterprise data.

Proxy Configuration Flaws Expose HTTPS URLs, Allow Hackers to Launch Various Attacks

Boston-based cybersecurity startup Pwnie Express announced this week that it has open sourced two of its security products – Blue Hydra and the Android Open Pwn Project (AOPP) – in an effort to help the community address Bluetooth and IoT device threats.

Niara is a Silicon Valley security company just one year out of stealth mode. This week the startup launched a new user and entity based analytics (UEBA) tool designed to detect existing and unknown ransomware.

A malicious Android application that was posing as a development tool was stealing users’ media files for over a year, researchers at Symantec warn.

EU Proposal Aims to Prevent Human Rights Violations Through Cyber-Surveillance Exports

The ancient Greek philosopher Heraclitus observed, “The only thing that is constant is change.” Fast forward 2,500 years and he could have been speaking about today’s digital era.

Hunkered down in a hospital cafeteria booth, a hoodied ELVIRA, mid-20s, slim, but not athletic, hovers over a laptop, appears agitated as her fingers scurry like mice for cheddar crumbs across the keyboard. Not lifting her eyes from the screen, she reaches for her coffee, knocks it over, shrieks. NURSE NANCY, 55, clad in Elmo-print scrubs and a striking pair of cobalt Danskos rushes to her side.

Researchers at security firm Digital Shadows have conducted an analysis of Deer.io, a Russian website that they claim makes it easy even for less technically skilled individuals to become cybercriminals.

Blocking traffic from certain countries or regions might not be a very efficient way of defending against web attacks, according to an analysis conducted by web security firm Sucuri.

It took the developers of the popular password manager LastPass just a few hours to patch a critical vulnerability that could have been exploited to hack the application and gain access to users’ passwords.

PhishMe, a company that helps organizations teach security awareness by educating employees on how to identify phishing attacks, today announced it has raised a whopping $42.5 million in funding.

Locky, one of the top ransomware families currently haunting users around the world, has upgraded its distribution mechanism, and is now spread embedded in JavaScript files attached to spam emails.