SecurityWeek

The 2016 SecurityWeek CISO Forum will take place June 1-2 at the beautiful Ritz-Carlton, Half Moon Bay, just south of San Francisco.

Cryptography isn’t new. Humans have always liked to keep secrets. Or at least try. More than 400 years ago, Mary, Queen of Scots, tried. Unfortunately, in the encryption-gone-wrong Babington plot, she didn’t fair so well. When one of Queen Elizabeth’s cunning advisors decrypted a coded correspondence about an assassination conspiracy, it was off with poor Mary’s head.

Bangladesh's central bank chief resigned on Tuesday, after hackers stole $81 million from the nation's foreign reserves in one of the biggest bank heists in history, the finance minister said.

Google announced on Monday two important changes to its Chrome Reward Program, namely an increased reward for hacking Chromebooks and the addition of a new class of vulnerabilities.

A new variant of the EDA2 educational ransomware has emerged, only to be quickly neutralized, despite its creator’s confidence that he would never get caught.

After the source code of the Android banking Trojan GM Bot was leaked online, the malware’s developer announced the release of a new version that has a much higher price tag.

Code.org, a non-profit organization that helps students learn computer science, informed users over the weekend that a flaw on its website allowed unauthorized parties to access the email addresses of its volunteers.

Vulnerability in Samsung’s SW Update Tool Exposes Systems to Man-in-the-middle AttacksSamsung has released an update for its SW Update Tool that resolves a man-in-the-middle (MiTM) vulnerability affecting Windows-based laptops.

Cyberterrorist attacks might not be very sophisticated, but they can be highly effective in spreading fear, according to a former FBI agent who now works in the private sector.

North Korea on Sunday blasted Seoul's accusation that Pyongyang had launched a series of cyber attacks targeting South Korean government officials, calling the allegation a "bullshit" fabrication.

Hackers Leak Customer Data From DDoS Protection Firm Staminus Distributed denial of service (DDoS) protection company Staminus was breached last week, when attackers managed to steal sensitive information from its database and publish it online.

Hackers who allegedly infiltrated the Bangladesh central bank were attempting to steal almost $1 billion from an account it held with the Federal Reserve Bank of New York, but typos thwarted the full heist, officials said Friday.

Researchers discovered that a patch released more than two years ago by Oracle for a serious Java sandbox escape vulnerability can be easily bypassed.

A high severity vulnerability revealed last week that affects HTTPS and other services that rely on SSL and TLS has not been patched by most affected cloud services, according to a recent scan.

Our modern world is strewn with cyber breaches, a proliferation of dangers, regional crises, political unrest, and dangerous threat actors – all at play against a backdrop of an over reliance on the Internet which was never designed to be the backbone of a global economy. 

Cisco released software updates this week to patch several high severity vulnerabilities in the company’s cable modems, residential gateways and security appliances.A couple of serious flaws in Cisco’s residential gateways were reported by Kyle Lovett, and Chris Watts of Tech Analysis.

A researcher at security firm X41 D-Sec uncovered a serious vulnerability in the “libotr” library that can be exploited for denial-of-service (DoS) attacks and remote code execution.

The Internet Systems Consortium (ISC) this week released updates for the DNS software BIND to address three high severity denial-of-service (DoS) vulnerabilities.

The Dridex botnet operators have recently changed the delivery mechanism in their spam campaigns, as well as the payload, to deliver the Locky ransomware, researchers at Trustwave warn.