SecurityWeek

Carbon Black, a player in what is commonly referred to as the “next-generation endpoint security” market, announced on Tuesday that is has acquired antivirus firm of Confer.

Vulnerabilities identified by researchers in more than a dozen software products, including many security solutions, can be exploited by malicious hackers to bypass exploit mitigations and compromise systems.

Researchers discovered that a vulnerability whose existence has been known for 15 years could affect many web applications, allowing malicious actors to launch man-in-the-middle (MitM) attacks.

Apple released on Monday security updates for OS X, iOS, watchOS, tvOS, Safari, iTunes and iCloud to address tens of vulnerabilities identified by the company’s employees and external researchers.

Cybercriminals breached the official website of the popular remote administration tool Ammyy Admin and leveraged it to deliver Lurk and other pieces of malware, researchers at Kaspersky Lab reported on Monday.

Cybercrime, we are told, is becoming increasingly professional -- it is being run like a business. If this is true, then selling ransomware decryption keys is almost the perfect business model. It has low start-up costs; is free from both corporation tax and regulators via bitcoin payments and Tor communication channels; it is repeatable business; and it fulfills a strong customer need.

Security weaknesses on many popular fitness trackers may allow hackers to access or potentially manipulate user data, a study showed Monday.

A serious vulnerability in the Mac OS X firewall Little Snitch could have been exploited by hackers to gain root privileges on a system or execute arbitrary code in the context of the kernel.

SFG, the Furtim-related piece of malware that was said last week to be specifically targeting “at least one European energy company,” might have no special interest in the energy sector after all, but is instead more focused on evasion and on stealing passwords and money.

CryptXXX, one of the most prevalent ransomware variants out there, is now leveraging spam emails for distribution, researchers at Proofpoint warn.

The Pokémon GO hype isn’t over, and more cybercriminals are taking advantage of it. After a malware-riddled Pokémon GO app emerged over a week ago, researchers have also found a fake lockscreen app in Google Play under the name of Pokemon Go Ultimate.

A researcher has demonstrated how malicious hackers could have stolen significant amounts of money from Google, Microsoft and Facebook by leveraging flaws in how these companies implemented their phone-based verification services.

Canonical informed users on Friday that the Ubuntu Forums website was breached after a hacker exploited a known vulnerability in one of the add-ons installed on the vBulletin-powered site.

Bay Dynamics, a maker of cyber risk analytics software, has completed a $23 million Series B financing round led by Carrick Capital Partners.The company’s flagship “Risk Fabric” platform was designed to detect and remediate insider threats and automate the process of analyzing security information to measure cyber risk.

Nearly one million Android users have fallen victims to eight fake applications that falsely claimed to help them gain more followers on social networks, but instead stole their information and money.

SWIFT Engages BAE Systems and Fox-IT to Bolster Threat Intelligence Sharing

The Onion Router, better known as Tor, is the most popular anonymity network out there, but MIT researchers claim to have created an even better system, called Riffle.

In my previous SecurityWeek article, we looked at what type of cyber threat intelligence analyst makes sense for your business. Analyst expertise can span a wide range of business, technical and security-related areas and the outputs that analysts provide can vary greatly based on business need.

After Android malware that intercepts incoming calls to bypass two-factor authentication systems emerged earlier this year, Symantec researchers have now discovered a Trojan that prevents users from making outgoing calls to banks from their smartphones.