SecurityWeek

The Sofacy threat group has been spotted sending a spear phishing email to a United States government agency from an apparently compromised email account belonging to a government organization in a different country.

VerticalScope, which hosts 1,100 websites and forums, was hacked earlier this year, with the details of around 45 million users later leaked online.

Hacked servers from all around the world are up for sale on obscure online marketplaces, and they are quite cheap too, going for as low as $6, Kaspersky Labs researchers warn.

Malware authors are switching from macros to object linking and embedding (OLE) to hide malicious Visual Basic (VB) and JavaScript (JS) scripts in Office documents, Microsoft warns.

SAP on Tuesday released a series of updates for its products, patching a total of 21 vulnerabilities, including four critical flaws, of which one was rated “Hot News.”

Schneider Electric has released a software update for its Pelco Digital Sentry video management solution to address a high severity vulnerability that allows attackers to compromise affected systems.

A critical vulnerability affecting Verizon’s webmail service could have been exploited by malicious actors to silently forward a targeted user’s emails to an arbitrary address.

Chinese Cyberspies Target Myanmar and Other CountriesA threat group believed to be affiliated with the Chinese government has been conducting cyber espionage operations against Myanmar and other countries for economic gain.

Network provider AT&T says it has to deal with large numbers of cyber-attacks each day on its global network, and that it sees around 30 billion malicious scans daily on its IP network.

The Flash Player zero-day vulnerability whose existence was brought to light on Tuesday by Adobe has been exploited by a relatively new advanced persistent threat (APT) group named by Kaspersky Lab “ScarCruft.”

Washington - US authorities charged a former Chinese employee of tech giant IBM with economic espionage Tuesday for allegedly stealing proprietary source code to hand over to a Chinese government agency.

Board members are paying attention to the cyber risk information reported to them and many say that cybersecurity executives could lose their jobs if they fail to provide useful, actionable information, a recent survey from Bay Dynamics reveals.

Microsoft has released a total of 16 security bulletins for June 2016 to fix nearly 40 vulnerabilities in Windows, Edge, Internet Explorer, Office and Exchange Server.

Hackers aligned with Russia's government breached US Democratic National Committee computers and stole data including a trove of opposition research on Republican presidential hopeful Donald Trump, the Washington Post reported Tuesday.

Using the Assimilation Project to Perform Service Discovery and Inventory of Systems

Adobe has released security updates for several of its products, but a critical Flash Player zero-day vulnerability exploited in targeted attacks will only be resolved later this week.

Internet of Things (IoT) devices are becoming an increasingly important part of enterprise environments, yet companies continue to fail at securing them properly, a recent report sponsored by ForeScout reveals.

The choice between using a single vendor platform, and integrating best-of-breed point products from different vendors is as old as computing - but is particularly pertinent to cyber security. In April this year Fortinet commissioned a survey of IT decision makers in 10 countries around the world, with particular reference to firewalls; and discussed some of the findings in a blog post yesterday.