SecurityWeek

Angler and Nuclear, two of the exploit kits (EKs) that dominated the landscape for years, are gone, with Neutrino and RIG being the leading crimekits now, but still far from reaching the EK traffic registered just a couple months ago.

Last week, Kaspersky Lab security researchers shared research on xDedic, a shady marketplace where access to hacked servers was being sold, and revealed that it spotted over 70,000 items for sale.

Silent Circle announced today the release of a new major system update for Silent OS, the operating system powering the company’s privacy-focused Blackphone 2 smartphones.

More than half of Alexa top 500 domains allow email spoofing because their owners have failed to properly configure email servers, according to web security firm Detectify.

Researchers have observed phishing attacks where cybercriminals used some new tricks to avoid raising suspicion and make their operations more efficient.

Over the weekend, Citrix informed users of its remote access software GoToMyPC that their passwords have been reset due to what the company calls a “very sophisticated password attack.”

We live in a connected world where we have multiple online accounts that are often segregated between our personal and work lives. Being able to use all of them at the same time while still keeping them separated isn’t always possible, yet Mozilla is attempting to change that with a brand new feature in the Nightly release of Firefox 50.

The value of Ethereum, a cryptocurrency somewhat similar to bitcoin, has plummeted following a hack on The DAO's Ethereum holdings. The DAO is a decentralized and virtual organization designed to provide funds for new projects. Those funds are held and dispersed as Ether. The DAO itself is the single largest holder of Ether; in excess of 9.2 million prior to the hack.

Apple announced this week at the company’s Worldwide Developers Conference (WWDC) that by the end of the year it wants all iOS applications in the official App Store to use secure HTTPS connections to communicate with their servers.

After paying out more than half a million dollars, Google has decided to increase the rewards offered to researchers who report vulnerabilities through the company’s Android bug bounty program.

Adobe has patched the Flash Player zero-day vulnerability exploited by a relatively new advanced persistent threat (APT) group dubbed “ScarCruft” in attacks aimed at high-profile targets.

GitHub informed users on Thursday that it has reset the passwords of an unspecified number of accounts after they had been compromised by attackers who leveraged credentials leaked from other online services.

Just two months ago, the Federal Bureau of Investigation (FBI) said that cybercriminals had managed to scam $2.3 billion from 17,642 victims in at least 79 countries through business email compromise (BEC) from October 2013 through February 2016.

Ardit Ferizi, arrested in Malaysia in October last year over alleged connections with the Islamic State of Iraq and the Levant (ISIL), admitted in a United States court on Wednesday to providing material support to the terrorist organization, the Department of Justice announced.

The FBI's facial recognition database has more than 400 million pictures to help its criminal investigations, but lacks adequate safeguards for accuracy and privacy protection, a congressional audit shows.

Security updates released on Wednesday for Drupal 7 and Drupal 8 patch a couple of access bypass and privilege escalation vulnerabilities.

Malware authors have been long using JavaScript to distribute their malicious applications, but none of them has created a piece of ransomware using exclusively JavaScript until now.

There’s nothing more exciting than a team that seems to overcome the odds to win a championship. Is it the coaching, the training, or determination of the players? Whatever the reason, their confidence builds and allows them to push forward and excel. 

Cisco is working on developing patches for several vulnerabilities affecting its RV series routers, including a critical flaw that can be exploited by a remote attacker for arbitrary code execution.

The 2016 Ponemon 'Cost of Data Breach Study' shows that breach-related costs are continuing to rise: a 29% increase in the total cost since 2013, and a 15% increase in the per capita cost over the same period. The average cost per lost or stolen record within the scope of the study is now $158.