SecurityWeek

Microsoft’s Windows AppLocker, a feature introduced in Windows 7 to specify which users can run apps within an organization, can be bypassed to execute remote scripts on a machine, a researcher says.

When it comes to cybersecurity, the common tact is to build out your network defenses and then extend to endpoints. But as business becomes more connected and as data moves further outside the organizational walls, enterprises must look at weaknesses across each area that depends on technology – and a good place to focus is on the supply chain.

A Small VPS Provider Registered in the United Arab Emirates Has Been Providing Services to Pawn Storm Attackers and Other Cybercriminal Operations

Malicious actors have abused PowerShell and Google Docs to deliver a Trojan known as Laziok, FireEye reported on Thursday.

Ransomware’s extortion-based business model, currently the latest major trend in the cybercrime industry, is marking a major change in the purpose and outcome of malware attacks and has become a major threat to consumers and enterprises alike.

Adobe released an update on Thursday for the Analytics AppMeasurement for Flash library to address a DOM-based cross-site scripting (XSS) vulnerability rated “important.”The AppMeasurement for Flash library allows users to collect video viewing activity and forward the data to Adobe’s data collection servers, where it can be used via Marketing Cloud services.

UPDATED. A researcher received $10,000 from Facebook after uncovering a serious vulnerability and what appeared to be a malicious web shell left behind by hackers on one of the social media giant’s servers. Facebook has clarified that the web shell was actually uploaded by another researcher analyzing the same flaws and noted that user data was never at risk.

The Federal Bureau of Investigation paid hackers more than $1 million to break into the iPhone used by one of the San Bernardino attackers, director James Comey said Thursday. Asked at the Aspen Security Forum in London how much the US agency paid for help to get into the phone, Comey replied, "A lot."

Distributed denial of service (DDoS) attacks observed in the first quarter of 2016 grew more advanced and more sophisticated, Imperva’s Global DDoS Threat Landscape Q1 2016 reveals.

State-sponsored threat actors in Asia have been leveraging a new technique to deliver remote access Trojans (RATs) without being detected by security products.

“It’s not the daily increase but daily decrease. Hack away at the unessential.”–Bruce Lee The rapid growth of innovation in cybersecurity technologies has presented a nearly endless range of new security offerings to address vulnerabilities in our computing environment. But what happens if more is not better?

Researchers have come across a new banking Trojan that appears to borrow code from the notorious Zeus.Dubbed Panda Banker, the threat was discovered in February by Fox IT and later analyzed in detail by experts at Proofpoint.

Anomali, a security technology firm that offers a SaaS-based cyber security intelligence platform, today announced it has raised $30 million in series C funding. The round, led by Institutional Venture Partners (IVP), brings the total amount raised by the company to more than $56 million since launching in 2013.

Cisco has released software updates to patch several critical and high severity denial-of-service (DoS) vulnerabilities in the company’s Wireless LAN Controller (WLC) products.

Mergers and acquisitions (M&A) can be exciting, offering companies a significant platform for growth. According to the Deloitte M&A Index 2016, global M&A activity reached record-breaking deal values in 2015 at over $4 trillion, with the resulting deals expected to add $1.5 to $1.9 trillion in value to these companies.

Australia Admits Government Hack Attacks, Boosts Cyber Security

Philippine officials said Thursday they have arrested a suspect in the hacking of the national election agency's website ahead of next month's presidential polls.

Two individuals suspected of developing and distributing the notorious SpyEye Trojan have been sentenced to a combined 24 years and six months in prison, the U.S. Department of Justice announced on Wednesday.

FIN6 Hackers Deployed Malware on Thousands of Retail and Hospitality Point-of-Sale SystemsResearchers have been monitoring the activities of a cybercriminal group that appears to have made a significant amount of money by stealing millions of payment card records and selling them on an underground marketplace.

Smartphones can be easily tracked by leveraging an old, yet unpatched security vulnerability in global cellular networks, a researcher has demonstrated.