SecurityWeek

Researchers at ESET have discovered a sophisticated data-stealing USB Trojan that leaves no trace on the compromised system and includes a self-protection mechanism that makes it difficult to detect, copy and analyze.

Unlike the Common Cold, Security Professionals Have the Ability to Treat the Root Case of Problems

A group of attackers believed to be from Pakistan has been targeting Indian military personnel in a data theft campaign involving social engineering and unsophisticated malware.

Financial Trojan detections have registered a 73 percent drop in 2015 when compared to the previous year, a new report from Symantec reveals.

In an effort to counter the use of malicious macros to deliver malware, Microsoft has packed a new macro blocking feature into Office 2016.

A Bangladeshi cyber-security expert reported missing after he criticized the central bank over an $81 million heist has reappeared, police said Wednesday.

Google announced this week the introduction of a new Certificate Transparency (CT) log for certificate authorities (CAs) that have been removed from trusted root certificate programs and ones that are in the process of being included.

Microsoft and Samba developers are working on patching a severe vulnerability that is said to affect almost every version of Windows and Samba.Samba is an open-source interoperability software suite that provides file and print services to SMB/CIFS clients. In addition to Windows, Samba also runs on UNIX, Linux, IBM System 390, OpenVMS and other operating systems.

US authorities Tuesday unveiled criminal charges against three members of the so-called "Syrian Electronic Army," which gained notoriety for hacking into news media outlets and making bogus social media posts.

The US government's decision to delay its effort to force Apple to help unlock an attacker's iPhone may only postpone the inevitable drawn-out battle over encryption and data protection.

Yahoo has expanded its password-free approach to user security to more applications for Android and iOS devices, namely Yahoo Finance, Fantasy, Messenger, and Sports.

Popular certificate authority StartSSL (StartCom) has resolved a security vulnerability in its domain validation process that could be abused by attackers to issue certificates for domains they do not own.

Uber announced on Tuesday the launch of a bug bounty program whose goal is to encourage security researchers to responsibly disclose vulnerabilities found in the ride-sharing company’s websites and applications.

Researchers at FireEye discovered a malvertising campaign in which attackers delivered malware by abusing a legitimate ad API provided by Chinese web services company Baidu.

Hackers breached a water utility and manipulated systems responsible for water treatment and flow control, Verizon said in a report released this month.

Strategy without the ability to execute is destined to fail, and execution without forethought will face the same fate.Most individuals find it difficult to think in terms of direction and action, so what happens when you have to juggle the two priorities? How do security executives strike the right balance, while aligning to business priorities, operational capabilities and their threats?

Updates released by Apple on Monday for its iOS and Mac OS X operating systems address serious encryption flaws affecting the company’s iMessage messaging protocol, which is reportedly used to send as many as 200,000 messages every second.

The US government said Monday it may have found a way to crack the iPhone of one of the San Bernardino attackers without Apple's help, possibly avoiding a showdown with the tech giant. In a court filing, federal prosecutors said that on Sunday, an unidentified "outside party" had demonstrated to the FBI a possible way to unlock Syed Farook's iPhone.

Google has released an emergency security patch to address a local elevation of privilege vulnerability in the Android kernel that affects certain devices.

Researchers discovered an encryption vulnerability affecting multiple Apple products, including the company’s instant messaging application iMessage.A research team from Johns Hopkins University, led by cryptography expert Matthew Green, reported finding a flaw in Apple’s encryption that can be exploited to access encrypted photos and videos sent via iMessage.