SecurityWeek

Security researchers at Kaspersky Lab have discovered a new piece of malware that uses a PNG (Portable Network Graphics) image to hide malicious code.

A new piece of malware dubbed Petya is making the rounds, and taking the threat of ransomware beyond simple file encryption activities.

A survey conducted by data protection company Vormetric and analyst firm 451 Research shows that a majority of IT security professionals in United States federal agencies feel their organization is vulnerable to data threats.

Surveillance cameras sold by more than 70 vendors worldwide were found to be vulnerable to Remote Code Execution (RCE) because of shared firmware code, a researcher has discovered.

Spying on the US is a service to China, state-run media said Wednesday, singing the praises of a man who confessed to hacking American defense contractors on Beijing's behalf.

Google has once again updated the Windows, Mac and Linux versions of Chrome 49 in order to patch several vulnerabilities, including high-risk issues for which researchers got paid thousands of dollars.Chrome 49.0.2623.108 resolves a total of five vulnerabilities, four of which have been identified and reported by external researchers.

Hackers reportedly stole the details of 1.5 million Verizon Enterprise customers after exploiting a vulnerability in the company’s website.Verizon Enterprise Solutions is a division of Verizon Communications that specializes in designing, building and operating networks, IT systems and mobile technologies for businesses and governments.

The website of security certification provider EC Council, best known for its Certified Ethical Hacker program, has been serving the Angler exploit kit (EK) for the past few days and continues to do so, security researchers at Fox-IT warn.

The United States on Thursday announced computer hacking charges against seven Iranians working for firms linked to the Iranian government, accusing them of infiltrating dozens of American banks and a major New York dam.

The FBI Thursday defended the handling of its legal battle with Apple over encryption following an abrupt retreat from its bid to force the tech giant to help unlock an attacker's iPhone.

One of seven Iranian suspects indicted by the US government and linked to the Iranian government hacked into the system controlling an American dam in 2013, prosecutors announced Thursday.

Bot protection firm Distil Networks has published its annual report that uncovers trends and statistics on global bot traffic across the Internet.

Updates released by Cisco on Wednesday for its IOS and IOS XE networking software patch several denial-of-service (DoS) vulnerabilities identified by the vendor’s own employees and external researchers.

Oracle announced on Wednesday that it has released an update for Java SE to address a serious vulnerability.

Cyber-Attacks Expected After Islamic Terrorist Attacks in Belgium

Israel-based mobile forensics firm Cellebrite is believed to be the mysterious “outside party” that might be able to help the FBI hack the iPhone belonging to the San Bernardino shooter.

To Consistently and Significantly Reduce Time to Detection, Security Teams Must Combine Sophisticated Threat Defenses with Skilled Security Researchers

SentinelOne lead OS X security expert Pedro Vilaça discovered a serious local privilege escalation vulnerability in OS X that can be leveraged to bypass Apple’s recently introduced System Integrity Protection (SIP) feature.

A Chinese national pleaded guilty Wednesday on charges stemming from the hacking of trade secrets from US defense contractors, including plans for transport and fighter jets, officials said.

Should you panic about the recently disclosed DROWN SSL vulnerability? Is it cute and kid-friendly, or is it a monster vulnerability coming to expose your most sensitive data? The DROWN announcement was done the right way: