SecurityWeek

Custom Backdoor Used in Targeted Attacks with Command and Control Servers Disguised as Antivirus Company Sites Researchers at Symantec have discovered a new backdoor Trojan being used in attacks against companies mainly located in Taiwan, but also against organizations in Brazil and the United States.

The high-stakes legal showdown between Apple and the FBI has abruptly ended, with no resolution to key questions about law enforcement access to devices with strong encryption.

The horrific news of the attacks in Belgium last week have resulted in predictable calls for increased security by pushing the perimeter back to the airport door. Security-weary air travelers may now be looking forward to outdoor queues to gain access to terminals, in addition to screening already in place.

A cybercriminal group has been using a custom-build point-of-sale (PoS) malware family to steal payment card data, which it sells on underground forums.

vBulletin informed users last week that all passwords had been reset after one of the vBulletin Germany servers was accessed by an unauthorized party.

Thousands Internet-connected printers around the world have been “hacked” and commanded to print anti-Semitic flyers.

New IRM-as-a-Service Platform Helps Developers Build Data Security Into Applications

In 2013 I wrote a Security Week column on how security automation and orchestration was a vital and foundational feature in a cloud

Users can now “vaccinate” their computers to prevent getting infected by a series of ransomware families, including CTB-Locker, Locky and TeslaCrypt.

Two Chinese men were responsible for moving $81 million stolen by hackers from Bangladesh's foreign reserves into Philippine casinos, an inquiry in Manila heard on Tuesday.

FBI Gets Into iPhone of San Bernardino Attacker The FBI has unlocked the iPhone used by one of the San Bernardino attackers, officials said Monday, ending a heated legal standoff with Apple that had pitted US authorities against Silicon Valley.

The abundance of security solutions flooding the market (and IT racks) has not resulted in any a strong confidence for preventing cyber-attacks. To support that notion, here are a few stats that provide an interesting perspective on the current state of cybersecurity:

Zen Cart on Friday released an updated version of the popular online open source shopping cart application to address multiple Cross-Site Scripting (XSS) vulnerabilities.

The personal details of thousands of foreign nationals living in southern Thailand were briefly leaked online in what the site's developer admitted Monday was a data breach during a test for police.

A new fileless ransomware family has been discovered, which abuses Windows’ PowerShell for nefarious activities, a novel approach to ransomware, Carbon Black researchers warn.

Iran on Saturday denied supporting cyber attacks against the United States after a New York court indicted seven Iranians over hacking dozens of American banks and a major dam.

Belgium's network of nuclear power plants and other major infrastructure face the threat of a cyber-attack over the next five years, the European Union's counter-terror chief said in an interview published Saturday.

Cyber security firm Bromium has added $40 million to its coffers, thanks to an additional investment to support its growth in the increasingly competitive endpoint security market. The additional funding brings the total amount raised to-date by the company to a whopping $115 million.

Stolen usernames and passwords belonging to 18 million Internet users have been found on a server owned by a Japanese company, which is said to have provided services to Chinese hackers.