SecurityWeek

The UK government's attempts to ease the passage of the hugely controversial Investigative Powers Bill continued this week with a Telegraph opinion piece from William Hague (former First UK Secretary of Sate and former leader of the Conservative Party): The Brussels attacks show the need to crack terrorist communications.

A new survey into cloud concerns undertaken by database security firm HexaTier provides no surprises: security risks (44%) followed by compliance and regulation (29%) are the two biggest factors preventing greater cloud adoption (although we are specifically talking about database as a service rather than cloud in general).

The controversial case in which the FBI asked Apple to unlock the iPhone belonging to the San Bernardino Islamic terrorist shooter appears to have ended after the law enforcemen

Last week The Wall Street Journal reported that two major US law firms had been hacked in the summer of 2015. Why, by whom, and what was stolen is just conjecture.

Researchers at Trend Micro have identified a serious vulnerability in door controllers developed by access control and secure identity solutions provider HID. The vendor has released a firmware update to address the issue and pointed out that the flaw does not affect HID readers. 

Cisco reported on Thursday that it has discovered a vulnerability in the Lhasa library that allows attackers to execute arbitrary code on targeted systems.Lhasa is an open source tool and library used to parse and decompress LHA (.lzh) archives, and it’s offered as an alternative for the UNIX LHA utility.

Tor Urges Sites to Switch CDNs After CloudFlare Says Most Traffic Is Malicious

Department of Defense Partners With HackerOne on First Federal Government Bug Bounty ProgramEarlier this month, the Department of Defense (DoD) announced "Hack the Pentagon," a new bug bounty program that will award security researchers who can discover vulnerabilities on the Pentagon's public web pages.

Petya, the ransomware family recently discovered to encrypt entire hard disks, performs a two-phase encryption process, researchers have discovered.

A new piece of ransomware apparently designed to encrypt files on websites running the popular Magento ecommerce solution has been spotted in the wild.The threat, dubbed “KimcilWare,” has been analyzed by researchers of the Malware Hunter Team and Lawrence Abrams of Bleeping Computer.

Researchers have discovered a method that can be used to install malware on iOS devices by abusing the mobile device management (MDM) solutions used by many enterprises.

Almost half of the $81 million that hackers stole from Bangladesh and funneled into Philippine casinos can still be recovered, a senior Filipino lawmaker investigating the audacious cyber heist said Thursday.

Cisco has released software updates to patch a high severity vulnerability that allows remote attackers to bypass the malware detection and blocking feature in the Firepower System Software.

Command Execution Flaw Patched in Trend Micro ProductsTrend Micro released patches on Wednesday to address a serious vulnerability affecting several of the company’s products.

Remaiten Linux Bot Targets Routers and Potentially Other Embedded (IoT) DevicesA new piece of malware is targeting embedded systems with the mission to compromise and make them part of a botnet, ESET security researchers have discovered.

Popular phone call management application Truecaller was discovered to pack a remotely exploitable security flaw that potentially impacts 100 million Android users, researchers at Cheetah Mobile Security Research Lab warn.

PayPal has patched a vulnerability that could have been exploited by attackers to send malicious emails to users via the payment processor’s own systems.

Researchers discovered that old versions of CareFusion’s Pyxis SupplyStation system are plagued by more than 1,400 vulnerabilities that can be remotely exploited by malicious actors.