SecurityWeek

A leaked draft of an encryption bill proposed by Senate Intelligence Committee leaders Sens. Diane Feinstein and Richard Burr has been heavily criticized by experts for its technical flaws, contradictions, and potentially dangerous effects.

Lateral Movement Gives Attackers Additional Points of Control in a Compromised Network

Swedish military computers were hacked and used in an attack targeting major US banks in 2013, the armed forces said on Monday.

WordPress.com has announced free HTTPS for all custom domains that it hosts, including blogs and websites.

Researchers at Cisco have spotted an instance of the Nuclear exploit kit where the final payload is downloaded via the Tor network in order to make tracking more difficult.

GE-owned Wurldtech, a provider of cyber security products and services for operational technology (OT) environments, announced new services this week designed to help customers protect their industrial networks from cyber threats.

The US government on Friday kept its encryption battle with Apple alive, pressing the high-tech giant to help crack an iPhone in a drug case in New York.

A cyber-attack on the website of the Philippines Commission on Elections (Comelec) has resulted in personally identifiable information (PII) of roughly 55 million people being leaked online.

Enterprise mobile security startup Bluebox security has agreed to be acquired by Lookout, a provider of mobile consumer and business mobile security products. While Lookout started with a focus on consumer mobile security, the company has expanded its portfolio to target the enterprise technology market.

Hackers breached the systems of Panama-based law firm Mossack Fonseca and leaked a large number of documents that appear to show how politicians, businessmen and other public figures from across the world used offshore companies to hide their income and avoid paying taxes.

A group of security researchers has discovered vulnerabilities in the reCaptcha systems of Google and Facebook, and have created an attack that is highly successful at automatically bypassing the protection system.

It has become customary for tech vendors to self-categorize their solutions as “next-gen” in the hope that customers used to buying the “last-gen” can be persuaded to upgrade. They try to muscle analyst firms like Gartner into recommending “next-gen” so they can cast market leaders into the bin of history.

Cisco published six new security advisories this week, with four rated as 'high impact' and two as 'critical impact'. Released on Wednesday, in the order of publication, they are:

Ask any chief information security officer (CISO) what worries him most about cloud migration and he is likely to reply, 'visibility'. When data goes into the cloud, visibility into the data is usually lost; and what you cannot see, you cannot control. This visibility issue explains the two biggest concerns about cloud: security and compliance. 

Mumblehard, a botnet comprised of servers running Linux and FreeBSD operating systems, was taken down on February 29, 2016, as part of a cooperation between ESET, the Cyber Police of Ukraine, and CyS Centrum LLC.

"Cyber AIR" Act Would Direct FAA to Establish Cybersecurity Standards for AircraftSenator Edward Markey (D-Mass.), Thursday, introduced a proposed new Cyber AIR Act as amendments to the FAA Reauthorization Bill currently being debated by the Senate. His bill follows his own investigation into the security practices of airlines and aircraft manufacturers.

Google informed network admins this week that it has made some improvements to the Safe Browsing Alerts for Network Administrators service.

Researchers have gained access to a command and control (C&C) panel of the Dridex banking malware, which has allowed them to determine how much information has been stolen by cybercriminals and how much money they might be making.

Adobe released a Flash Player update on Thursday to patch a zero-day vulnerability that has been leveraged by cybercriminals to deliver malware via the Magnitude exploit kit.

While it has been roughly two months since it was first spotted, the Locky ransomware has become a global threat, targeting users in 114 countries. While the threat has infected systems around the world, a heavy concentration of attacks have registered in Germany and France, Kaspersky Lab says.