SecurityWeek

One in five employees are willing to sell their work passwords to an outsider, in many cases for less than $1,000, according to a survey conducted by identity and access management firm SailPoint.

Data Science and Machine Learning Can Help Enterprises Keep Pace with Faster and More Automated Cyber Threats

Symantec has released an update for its Symantec Endpoint Protection (SEP) to resolve three High risk security vulnerabilities in the product.

Los Angeles - The US government and Apple will face off in court on Tuesday in a closely-watched case that could have wide-reaching implications on digital security and privacy.

Google announced on Friday that its binary comparison tool BinDiff can be downloaded by security researchers free of charge.

In response to criticism from the CVE Editorial Board, the MITRE Corporation has decided to put a recently announced pilot program meant to address the need for rapid CVE assignments on hold.

The FBI has agreed to help Bangladesh investigate an audacious $81 million theft from the nation's foreign reserves, authorities said Sunday, days after the finance minister accused central bank officials of complicity in the heist.

Stockholm - The online editions of Sweden's main newspapers were knocked out for several hours by unidentified hackers at the weekend, police said Sunday as they launched an investigation. The attack was "extremely dangerous and serious," the head of the Swedish Media Publishers' Association, Jeanette Gustafsdotter, told Swedish news agency TT.

When mystery hackers launched a stunning raid on Bangladesh's foreign reserves, a plot worthy of a John le Carre spy novel was sparked in the Philippines, exposing the Southeast Asian nation as a dirty money haven.

Microsoft announced this week at the CanSecWest conference in Vancouver, Canada, that it has added OneDrive to the company’s Online Services Bug Bounty Program.The tech giant says it’s prepared to pay between $500 and $15,000 for vulnerabilities in the online cloud storage service.

FBI Reminds That Connected Cars Are Increasingly Vulnerable to Remote Exploits

With just 5 percent of web servers correctly implementing HTTP Strict Transport Security (HSTS), the remaining 95 percent are vulnerable to trivial connection hijacking attacks, research shows.

Encrypted email provider ProtonMail announced the global availability of its privacy focused email service to the public this week.

The cybercriminal gang known as Buhtrap has stolen $25 million from 13 Russian banks over a six-month period, according to a report published on Thursday by Russia-based security firm Group-IB.

The Bangladesh finance minister has accused central bank officials of being complicit in an audacious $81 million theft from an overseas account, in an interview with a leading Bengali newspaper published Friday.

A fairly new piece of ransomware has been found leveraging pen-testing/attack tools for a more targeted approach of getting installed on compromised systems, Microsoft researchers warn.

With an increasing number of researchers displeased with the fact that it takes a lot of time to assign Common Vulnerabilities and Exposures (CVE) identifiers to their flaws, the MITRE Corporation has decided to launch a pilot program whose goal is to address the need for rapid CVE assignments.

A Bangladeshi cyber security expert has gone missing, his family said Friday, days after he said officials at the central bank bore some responsibility for an $81 million theft from its foreign exchange account.

Pwn2Own 2016 has come to an end, with researchers earning a total of $460,000 in cash for disclosing 21 new vulnerabilities in Windows, OS X, Flash, Safari, Edge and Chrome.

Experts at software research firm NorthBit have developed what they believe to be a reliable exploit for a Stagefright vulnerability affecting Google’s Android operating system.