SecurityWeek

For all of last week and continuing into this week, major DNS and traffic management provider NS1 suffered a continuing and complex DDoS attack from unknown attackers with unknown motivation. 

Proactive Data Analytics Accounts for Just 3 Percent of Fraud Detected

Palo Alto Networks researchers noticed that a China-linked advanced persistent threat (APT) actor has been using a piece of malware that leverages DNS requests for command and control (C&C) communications.

An Office vulnerability patched by Microsoft last year has been exploited by several advanced persistent threat (APT) actors in operations aimed at organizations in Asia, Kaspersky Lab's Global Research and Analysis Team reported on Wednesday.

FrameworkPOS, a piece of malware used to capture payment card data from the memory processes running on Point-of-Sale systems, is being used in a new attack campaign, researchers at Anomali warn.

A product manager approaches the security architect. “Please,” the product manager says, “I only have one or two more releases of this product before the program is cancelled. Won’t you please sign off on shipping without your security requirements so that we can afford to implement a few more features?”

An official inquiry has found serious shortcomings in how US presidential candidate Hillary Clinton and her predecessors in her former post as secretary of state managed the security of their emails.

Several serious vulnerabilities affecting Moxa’s MiiNePort embedded serial device servers have been disclosed by ICS-CERT and the researcher who discovered the issues.MiiNePort are embedded serial-to-Ethernet device server modules mainly deployed in the United States and Europe in the commercial facilities, critical manufacturing, energy and transportation sectors.

Microsoft Banning Commonly Used Passwords and Adding Account Lockout FeatureWeak and commonly-used passwords are one of the main reasons online accounts can be easily compromised, but Microsoft is taking a step to better protect users by banning the use of such passwords across its services.

An operation conducted on May 18 by the French Gendarmerie of Pau, in cooperation with the Investigative Unit of the Italian State Police of Imperia and Europol, resulted in multiple house searches in France and Italy, as well as in the final arrest of nine individuals in France, Europol said in a statement

Austrian aircraft parts maker FACC said Wednesday that it has fired its chief executive of 17 years after cyber criminals stole some 50 million euros ($55.7 million) in a so-called "fake president" scam.

The fact that web browsers allow developers to manipulate the content of the clipboard can be exploited by attackers to trick unsuspecting users into executing potentially malicious code on their systems.

Unlicensed Software Use Still High Globally Despite Costly Cybersecurity ThreatsMore than 60 percent of all computer software installed in the Asia-Pacific in 2015 was unlicensed, the worst of any region, despite growing economies and anti-piracy efforts, an industry watchdog said Wednesday.

Agari, a provider security solutions that help detect email-based cyberattacks, today announced that it has raised $22 million in a Series D funding round, bringing the total raised by the company to $44.7 million. The company previously raised $15 million in a Series C funding round back in September 2014. 

Threat Intelligence Sharing Moves Center Stage for SWIFT

A series of attacks carried out against banks in the Middle East in early May were using unique scripts that are not commonly seen in crimeware campaigns, researchers at FireEye warn.

A vulnerability in the Web Proxy Auto-Discovery (WPAD) protocol can be exploited by malicious actors to launch man-in-the-middle (MitM) attacks against enterprise users, researchers warned.

Think of Microsoft and you think of Satya Nadella. Think of Google and you think of, well, who? While Microsoft has a single guiding vision for the future, Google does not. Microsoft intends to dominate the corporate cloud, and everything it does is based on that intention. Google, however, seems to have lost its way.

As ransomware authors continue to increase their presence on the threat landscape, the group behind the DMA Locker malware is getting ready for massive distribution, Malwarebytes researchers warn.

An update released by Adobe for its Connect web conferencing software addresses over two dozen functionality bugs and one security flaw.