SecurityWeek

VMware has released updates for some of its products to address several vulnerabilities, including an information disclosure issue rated critical.

Fast food restaurant chain Wendy’s informed customers on Thursday that the number of locations where cybercriminals compromised point-of-sale (PoS) systems is much higher than initially estimated.

Last month, information associated with more than 100 million LinkedIn accounts has emerged online, and malicious campaigns that abuse this user data have started to appear.

Trihedral Engineering, a Canada-based company that specializes in developing software for SCADA systems, has patched several remotely exploitable vulnerabilities in its VTScada product.

A serious Chrome vulnerability patched recently by Google allowed hackers to execute arbitrary code on a system by using malicious PDF documents.The vulnerability, discovered by Aleksandar Nikolic of Cisco Talos, is a heap buffer overflow (CVE-2016-1681) affecting PDFium, the default PDF reader in the Chrome web browser.

A vulnerability affecting routers and switches from Cisco and Juniper Networks can be exploited by remote attackers to cause the devices to enter a denial-of-service (DoS) condition.

Hackers are human. Hopefully that doesn’t surprise you too much. Being human means that they are subject to human tendencies, like taking the path of least resistance.

The number of bug bounty programs launched over the past year has increased considerably and more than a quarter of programs are run by larger organizations in more “traditional” sectors, according to Bugcrowd’s second annual State of Bug Bounty Report.

Samsung this week released a new set of security patches for its Android devices, addressing many of the vulnerabilities that Google resolved in the June 2016 Android security updates, along with various other flaws in its products that were disclosed in the past months.

Banking giant Morgan Stanley will pay $1 million as penalty for failure to protect information on roughly 730,000 of its clients, the Securities and Exchange Commission (SEC) said Wednesday.   

Ransomware is currently one of the largest cyber-threats out there, affecting enterprises and individuals alike, but every now and then the cybercriminals behind such malicious applications make critical mistakes.

Ransomware has been long recognized as a global threat, capable of hitting enterprises and consumers, and the University of Calgary is the latest organization to have fallen victim to this type of cyber-attack.

The FFIEC has issued a statement alerting US financial institutions (FIs) to the interbank transfer threat following the recent spate of SWIFT-based attacks and thefts.

Stephen Sills’ 1970 single “Love The One You’re With” inspired me to write about a topic that I’ve been meaning to write about for quite some time.  Where could I possibly be going with this, you ask?  That’s certainly a fair question.  In the security realm, it’s not love, but rather trust that I think deserves mention.  I’d like to discuss the theme of “Trust The One You’re With”.

RansomWeb attacks are on the rise and there are plenty of vulnerabilities malicious actors can exploit to conduct such operations, according to web security firm High-Tech Bridge.

Researchers have discovered several SQL injection vulnerabilities in the websites of the European Parliament and the European Commission — both hosted on the official domain of the European Union (europa.eu).

An unpatched vulnerability in a popular Wi-Fi camera from D-Link allows hackers to reset the device’s password and gain remote access to its video feed.

Microsoft Offers Up to $15,000 in Bounties for .NET Core, ASP.NET RC2 Beta Vulnerabilities Microsoft this week announced an expansion to its bug bounty program to include the newly released .NET Core and ASP.NET Core RC2 Beta.

Cyber threat protection firm Cylance announced on Wednesday that it has completed the initial closing of a $100 million Series D funding round.