SecurityWeek

Inkyfada, an electronic magazine investigating Tunisian involvement in the so-called Panama Papers, came under attack by hackers on Tuesday just hours after its first postings on the scandal.

A report has claimed that there are vulnerabilities in the US Consular Consolidated Database (CCD) that contains personal details from everyone who has applied for a US visa over the past twenty years.

Locky, a popular ransomware family that emerged earlier this year, has been displaying changes in its communication patterns in recent weeks, Check Point researchers say.

While we wait to discover what and how the Trump Hotel Collection was breached, a new version of the TinyPOS point-of-sale (PoS) malware has been discovered by Foregenix. 

UPDATED. iPhone 6s and 6s Plus phones running the latest version of iOS are plagued by a vulnerability that can be exploited to bypass the lockscreen and gain access to photos and contacts.

Google’s latest set of Nexus patches are rolling out now to resolve multiple Critical vulnerabilities in Android, including a series of remote code execution (RCE) flaws in the mediaserver component.

Hackers have dumped a database apparently containing personal details of almost 50 million Turkish citizens. The details were posted to an Icelandic organization that specializes in such data dumps. According to SecurityWeek’s research, the server is hosted in Bucharest, Romania.

The UK Government said it will conduct a joint exercise with the United States next year to test the security of civil nuclear infrastructure against a major cyber attack. Set to be officially announced soon, the exercise will “simulate a cyber attack on nuclear power supplies” to see how the two allies can work together in the event of such a cyber threat.

The cybersecurity industry is bubbling with new technologies that go after the threat du jour. The threat landscape has evolved, and cyber risk from organized crime and nation states represent a clear and present danger. The impact on enterprise security is severe. Our security is only as good as our ability to coherently and consistently put up a solid defense.

A patch released by IBM in 2013 for a Java sandbox escape vulnerability can be easily bypassed, according to the security firm that discovered and reported the issue.

Trump Hotel Collection has launched an investigation after financial institutions reported seeing fraudulent activity on payment cards used at its properties.

As the US tax season draws to a close, authorities are warning of an alarming rise in "phishing" scams designed to steal sensitive personal and financial information.

Passive Authentication May be the Future for User Authentication, and it's Just Beginning to Appear

Ransomware creators are increasingly focused on making victims pay a ransom, and Rokku, a new malware family in this segment, is the latest example.

Researchers at security firm FireEye have analyzed another hot-patching solution for iOS applications that could be abused by malicious actors to turn harmless apps into malware.

How Combining Two Completely Separate Open Source Projects Can Make Us All More SecureWhen you run an application, how can you verify that what you are running was actually built from the code that a trusted developer wrote?

A researcher has identified a serious path traversal vulnerability in a web-based human machine interface (HMI) product from industrial automation software developer ICONICS.

A new survey and report from Tanium and NASDAQ, using a research team from Goldsmiths, University of London, seeks to quantify organizations' cyber security vulnerability.

2.6 Terabytes of Leaked Documents From Panama Law Firm Mossack Fonseca Expose World Leaders, Tax Havens and Shell Companies

Microsoft has patched a serious authentication vulnerability that could have been exploited to gain access to Outlook, Azure and Office accounts, a researcher reported over the weekend.