SecurityWeek

Ransomware-as-a-Service (RaaS) has become a very popular business model over the past several months, and the actor(s) behind Petya and Mischa ransomware families have adopted the service model.

Cybercriminals are abusing stolen or newly created PayPal accounts to send spam emails that link to the Chthonic banking Trojan, Proofpoint researchers warn.

Presidential Policy Directive PPD-41 Describes a National Cyber Incident Response Plan

SecurityWeek and Palo Alto Networks will host a live network security webinar on Wednesday, July 27th at 1:00PM ET: Five Steps to a Secure Hybrid Architecture.

Siemens has released software updates for several of its industrial automation products to address medium and high severity vulnerabilities discovered by researchers from various companies.

BlackBerry Makes Pitch for BYOD Market With DTEK50 

Kimpton Hotels & Restaurants has launched an investigation after learning that unauthorized charges have been identified on payment cards used at its properties.Kimpton is a San Francisco-based company that operates more than 60 boutique hotels and over 70 restaurants, bars and lounges in 30 cities across the United States.

The Xen Project has released patches for two vulnerabilities, including a serious issue that could allow an attacker to escape the guest virtual machine.

Researchers at security firm Rapid7 have identified several vulnerabilities in the home and professional versions of Osram’s Lightify smart connected lighting products.

Researchers at Arbor Networks, the security division of Netscout, recently managed to crack the heavy obfuscated domain generation algorithm (DGA) of Mad Max, a targeted Trojan that has created a botnet of infected machines in sixteen countries.

Wireless keyboards from several vendors don’t use encryption when communicating with their USB dongle, allowing remote attackers to intercept keystrokes or send their own commands to the targeted computer.

Jihadist groups use a variety of digital tools and online services that allow them to maintain a strong online presence, while also helping them remain undetected by adversaries, a recent report from Flashpoint reveals.

As I wrote about last month, there is an increasing interest by a wide range of organizations to acquire access to external threat intelligence or feeds.  While this is potentially a good thing, it needs to be seen within

Cybersecurity startup SafeBreach announced on Tuesday that it has closed a $15 million Series A funding round to expand its research and development and sales and marketing efforts.

Microsoft is launching new Microsoft Authenticator applications next month in popular mobile app stores to provide users with multi-factor authentication (MFA) functionality on the go.

Researchers discovered that an SSL flaw in Amazon’s Silk web browser could have been exploited by hackers to monitor users’ search engine traffic.

The India-linked threat actor known as Patchwork or Dropping Elephant is targeting more than just government-associated organizations, Symantec researchers say.

Researchers have found a way to bypass the User Account Control (UAC) security feature on Windows 10 by leveraging the Disk Cleanup utility.

The FBI announced Monday it was investigating the embarrassing hack of Democratic National Committee emails -- a breach the Clinton campaign blamed on Russia, accusing Moscow of seeking to influence the US presidential election.

MIT Hit By More Than 35 DDoS Attacks So Far This Year