SecurityWeek

A serious vulnerability in Samsung’s SW Update application allows an attacker to elevate their privileges on systems where the utility is installed, researchers warned on Monday.

Intel has revealed Control-flow Enforcement Technology (CET), a new safety mechanism to hinder Return Oriented Programming (ROP) and Jump Oriented Programming (JOP) attacks.

A worm observed in thousands of attacks this year features sophisticated protection mechanisms that allow it to remain on infected systems for years, GuardiCore security researchers warn.

More than a quarter of the third-party apps used in enterprises are risky, and one of the most problematic are connected cloud applications, according to cloud security company CloudLock.

You might believe that the expensive network security hardware you installed will protect you from bad actors — until a single employee undoes all that good work when he doesn’t realize the attachment he just opened carries dangerous malware.

Server Bug Exposes Email Addresses of 7,618 Let's Encrypt Users

The U.S. Internal Revenue Service (IRS) announced last week that it relaunched its Get Transcript online service after making some security improvements to its authentication process.

Researchers have recently noted a large scale switch from the Angler exploit kit (EK) to the Neutrino exploit kit. Last Wednesday SANS ISC noted that CryptXXX ransomware was now being delivered by the Neutrino EK. "Until then, I'd only seen Angler EK distribute CryptXXX," reported Brad Duncan.

North Korean hackers managed to steal thousands of records from private firms and state agencies in the South including defense industry information and files from Korean Air, Seoul police said Monday.

Netgear released firmware updates last week for its D3600 and D6000 Wi-Fi modem routers to address a couple of serious vulnerabilities reported to the company in December 2015.

Researchers are fairly confident that the Palestinian terrorist organization Hamas is behind the cyber espionage group known as Gaza Hackers Team, Gaza Cybergang and Molerats.

Symantec Expands IoT Security Portfolio to Connected Cars

The leaked source code of the Carberp Trojan has spawned numerous malware variations, and a new one has emerged showing increased sophistication.

In an effort to help secure open source software, Mozilla this week announced the creation of Secure Open Source (“SOS”) Fund, which kicks off with an initial $500,000 grant.

Two Israeli citizens, arrested in Israel in July 2015 and extradited to the US this week pleaded guilty Thursday to orchestrating a computer hacking and fraud scheme that included, but was not limited to, the theft of personal information on 83 million customers from

Siemens has released firmware and software updates to address a couple of vulnerabilities affecting some of the company’s SIMATIC industrial automation products.

$2.3 billion stolen from 17,642 victims in at least 79 countries. These are the current figures for the growing scourge known as business email compromise (BEC) from 2013 to 2015.

Malicious email campaigns spreading the Dridex banking Trojan and the Locky ransomware have been inactive for over a week after the Necurs botnet that fueled them experienced an outage, Proofpoint researchers reveal.

Singapore's prime Minister Lee Hsien Loong has defended the country's controversial decision to cut off civil servants' work computers from the Internet, calling the move "absolutely necessary" to keep information systems secure.