SecurityWeek

The Qatar National Bank (QNB) has launched an investigation after someone leaked a large number of files allegedly stolen from the financial institution’s systems as a result of a hacker attack.

A researcher received a $5,000 reward from Facebook after finding a vulnerability that could have been exploited to impersonate users on other websites.

A new piece of Android ransomware is being delivered via a two known exploits without requiring interaction from the victims.

The US military is now conducting cyber attacks on the Islamic State group, a general said Tuesday as the Pentagon looks for ways to accelerate the fight against the jihadists.

Researchers at Netcraft have come across a Facebook phishing attack in which malicious actors leveraged some clever methods to increase their chances of tricking users into handing over their credentials.

FBI Director James Comey said Tuesday he has seen some improvement in cooperation from China in fighting cybercrime following last year's bilateral agreement on the issue.

Tor (The Onion Router) has long been the go-to browser for people looking to protect their privacy when accessing various online destinations, and more and more people are using it to access Facebook.

A new cyber-extortion group going by the name of the Armada Collective is extorting organizations by demanding they pay a ransom in order to avoid being hit by distributed denial of service (DDoS) attacks.

Washington - FBI Director James Comey called Tuesday for a discussion of the "costs" of strong encryption now that a legal battle over access to the iPhone used by a California attacker has ended.

Several people have pleaded guilty to their roles in tax fraud schemes involving the Internal Revenue Service’s “Get Transcript” database.The “Get Transcript” online service was launched in January 2014 to allow users to view and download their tax transcripts. The service was shut down in May 2015 after the IRS discovered that it had been abused by fraudsters.

When it comes to security vendors, businesses are often resigned to inertia – just keeping up with whatever worked in the past. However, the increasing complexity of the overall enterprise network and security environment, combined with the shortage in skilled staff, make “business as usual” a costly and risky paradigm. 

Researchers at Trend Micro have spotted a new variant of the Fareit malware being delivered to victims using Windows PowerShell.

The United States government has dropped a case in which it attempted to get Apple to extract information from an iPhone after receiving the passcode to the device.

The cybercriminals behind the recently discovered GozNym banking Trojan have started targeting users in European countries.

Ransomware has become a formidable enterprise threat, and researchers suggest that it could allow malicious actors to leverage the growing ransomware-as-a-service (RaaS) to cause irreparable damage to organizations.

HP has released security updates for various HP Data Protector iterations, in an attempt to patch a series of critical vulnerabilities that could result in remote code execution or disclosure of information.

Custom Malware Prevented Bangladesh Bank From Detecting Fraudulent TransfersResearchers at British multinational defense, security and aerospace company BAE Systems believe they have found the pieces of malware used by cybercriminals to steal $81 million from Bangladesh’s central bank earlier this year.

Shellshock Vulnerability Played a Major Role in Many Attacks in 2015 

The Massachusetts Institute of Technology (MIT) has launched a bug bounty program to encourage responsible disclosure of vulnerabilities found on its websites.

The Open Web Application Security Project (OWASP) was founded in 2001. This non-profit organization seeks to educate and inform developers on secure development practices, and provides developers with tools to create web applications securely.