SecurityWeek

Blocking C&C Connections Won't Stop Locky RansomwareLocky, one of the most used ransomware families during the first half of the year, is now able to encrypt files without connecting to a command and control (C&C) server, Avira researchers warn.

Two-thirds of European consumers want to use biometrics to make payments easier and more secure. This is the finding of new research commissioned by Visa Inc and undertaken by Populas during late April and early May 2016.

Microsoft Email Ruling will Make GDPR Conformance Simpler and the Privacy Shield Stronger

Experts monitoring the dark web have come across a new Trojan designed to help threat actors recruit insiders within the organizations they want to target.

Researchers have identified hundreds of high severity vulnerabilities in a healthcare product from Philips. The vendor has released software updates that address the issues.

The developers of the Neutrino exploit kit have added a recently patched Internet Explorer vulnerability to their arsenal after researchers published a proof-of-concept (PoC) exploit.

GE and Microsoft unveiled a new partnership this week that will make GE’s Predix platform for the Industrial Internet available on Microsoft’s Azure cloud platform.

A lifetime license for the newly discovered Stampado ransomware is on sale for just $39 on the Dark Web, mainly because of the large number of threats out there, researchers at Heimdal Security warn.

Cisco and Juniper Networks have released security updates to patch various high severity vulnerabilities affecting the operating systems that run on their products.

Microsoft this week patched more than 40 vulnerabilities in Internet Explorer, Edge, Office, and other products, including a 20-year old issue that made Windows computers vulnerable to botched printers.

Whether you follow politics, healthcare, or sports, there’s a lot happening in the world right now and a lot to keep up with. Attackers are taking advantage of this flurry of activity and your quest for information to launch a new round of scams.

Security experts have discovered that the Maxthon web browser collects sensitive information and sends it to a server in China. Researchers warn that the harvested data could be highly valuable for malicious actors.

Drupal this week released security updates for three modules to patch Highly Critical and Critical remote code execution (RCE) vulnerabilities in them.

Fiat Chrysler Automobiles (FCA) announced on Wednesday the launch of a bug bounty program aimed at improving the cybersecurity of the company’s vehicles.

Threat actors believed to be from China breached the systems of the U.S. Federal Deposit Insurance Corporation (FDIC), but the agency’s chief information officer attempted to cover up the incident, according to a report published this week by the House of Representatives Science, Space and Technology Committee.

A Chinese national was sentenced on Wednesday in Los Angeles to three years and 10 months in prison for hacking American defense contractors to steal trade secrets on Beijing's behalf. Su Bin, 51, who went by the names Stephen Su and Stephen Subin, was also ordered by a federal judge to pay a $10,000 fine.

Nymaim, a malware family that was prevalent in 2013, has reemerged strong on the threat landscape, marking a 63% increase in attacks compared to last year, ESET researchers warn.

Hidden Voice Commands Can Compromise Mobile DevicesAmong the multiple ways of compromising a mobile device, a new method was recently analyzed by researchers that humans can’t detect: hidden voice commands.

Accounting for a quarter of all ransomware detections over the past 30 days, Cerber is strengthening its position at the top of the threat segment, data released by Microsoft this week reveals.