SecurityWeek

Researchers at Trend Micro have been monitoring a business email compromise (BEC) campaign aimed at companies from all around the world.

What does a CISO look like? You may think that's a tough question--and it is. But the folks at cybersecurity firm Digital Guardian have done some research and profiled the typical CISO at a Fortune 100 enterprise. 

“…is part of this balanced breakfast…” This is the claim of many sugary cereals aimed directly at children. It is also the claim of many vendors in the software security market.

Pwn2Own 2016 contestants hacked Apple Safari, Adobe Flash Player and Google Chrome, and earned more than $280,000 on the first day of the competition taking place this week alongside the CanSecWest conference in Vancouver, Canada.

American Express informed customers last week that their payment card information may have been compromised after a third party service provider suffered a data breach.

A recent malvertising campaign leveraging the Angler exploit kit (EK) has hit many top websites, including news sites, entertainment portals, and political commentary sites.

Researchers have discovered a new iOS malware family that abuses design flaws in Apple’s FairPlay digital rights management (DRM) technology to infect devices, even ones that haven’t been jailbroken.

Last week, distributed denial of service (DDoS) protection company Staminus was breached in an attack that appears to have impacted roughly 2,300 current and past customers.

A researcher discovered an unprotected database storing the details of 198,000 users who had signed up for a now-defunct iOS application.A misconfigured MongoDB database associated with the iPhone app Kinotopic was discovered by Chris Vickery, a researcher who currently works at Kromtech, the company behind MacKeeper.

A printer fault at Bangladesh's central bank meant that overseas queries about suspicious transactions went unanswered, according to a report seen by AFP Wednesday on the $81 million cyber heist that sent shockwaves through the banking world.

A Pennsylvania man was charged on Tuesday for accessing the Apple and Google email accounts of over 100 people, including several celebrities.

VMware announced on Tuesday that it released patches for the Linux version of two vRealize products in order to address cross-site scripting (XSS) vulnerabilities.

Is the probability of an Automated Patch Breaking a System Worse Than the Increased Risk of Getting Hacked?

Researchers at security firm Proofpoint have discovered what they believe to be new Carbanak campaigns aimed at organizations in the Middle East, the United States and other countries.

A flaw in the command and control (C&C) server used by Radamant ransomware has allowed researchers to trick the malware into decrypting victim’s machines for free, InfoArmor reports.

Google announced on Tuesday that its transparency report now includes a section dedicated to monitoring the use of HTTPS on the world’s top 100 websites.Data protection and privacy have become increasingly important, and many organizations have started moving their websites and services to HTTPS. However, the migration process can prove challenging for large services.

Study Shows Many Companies Ignore Majority of Security Alerts A new study shows that incident response (IR) has become more difficult over the past two years due to an increasing number of IT activities and security alerts, and the difficulty of extending existing IR processes to new technologies.

A new piece of malware dubbed “PowerSniff” has been spotted by researchers in semi-targeted attacks aimed at users in the United States and some European countries.