SecurityWeek

The Dridex botnet operators have recently changed the delivery mechanism in their spam campaigns, as well as the payload, to deliver the Locky ransomware, researchers at Trustwave warn.

The Justice Department argued Thursday that compelling Apple to help unlock an iPhone in California is a modest demand which may turn up evidence of a terrorist attack.

Adobe Issues Emergency Out-of-Band Patch For Flash Zero-Day Used in Targeted Attacks

Security researchers at ESET have discovered a new piece of Android malware that poses as Flash Player, but instead steals login credentials from roughly 20 mobile banking apps.

Locky, one of the latest file encrypting malware families to hit the virtual streets, has become the second biggest player on the ransomware landscape, researchers at Fortinet reveal.

SAP this week released a series of security updates for its products that address a total of 28 vulnerabilities.Of the 28 vulnerabilities included in the SAP Security Patch Day for March 2016, 14 are new patches, while four are updates to previously released fixes. Ten are Support Package Notes, the enterprise software company says.

Mozilla this week released the stable version of Firefox 45 to resolve 40 vulnerabilities in the browser, 22 of which are rated Critical.

Enterprises Must Monitor Their Entire Digital Shadow in Order to More Accurately Identify Specific Risks as They Unfold

Triada Trojan Exists in RAM and Uses Zygote Process to Hook All Applications on AndroidSecurity researchers at Kaspersky Lab recently came across a new Trojan targeting Android devices, which they say is the most advanced mobile malware seen to date.

MariaDB Corporation today announced the new features and capabilities that will be available in the upcoming release of MariaDB Enterprise.

KeRanger, a threat that is believed to be the first fully-functional OS X ransomware, is actually a Mac version of the Linux ransomware known as Linux.Encoder, according to researchers.

It’s a done deal. Trend Micro said on Wednesday that it has completed its $300 million acquisition of the TippingPoint network security portfolio from Hewlett Packard Enterprise (HPE). 

Google on Tuesday released a security update for Chrome 49 to resolve three vulnerabilities assessed with a High risk score.

The RSA Conference in San Francisco is the largest annual gathering of people working in, selling to, reporting on or analyzing the security industry. Each year there are general trends that come out of the show, although trends can be in the eye of the beholder.

Free and open Certificate Authority (CA) Let’s Encrypt announced this week that it has issued more than 1 million certificates since issuing its first Digital Certificate last year.

The 13 security bulletins released by Microsoft as part of the March 2016 Patch Tuesday address tens of vulnerabilities in Windows, Internet Explorer, Edge, Office, Server Software, and the .NET Framework.

Adobe released updates on Tuesday for its Acrobat, Reader and Digital Editions products to address several critical vulnerabilities that can lead to code execution.

The Internal Revenue Service (IRS) announced on Monday that it has temporarily suspended its Identity Protection (IP) PIN tool while it further strengthens its security.

Google has patched another series of Critical vulnerabilities in Android, including a remote code execution (RCE) flaw in mediaserver and several elevation of privilege (EoP) issues in various drivers and components.

The landscape of enterprise endpoints has shifted dramatically in the last few years, as typical endpoints have evolved from laptops to mobile devices—a shift that’s likely to grow as mobile devices offer increased screen sizes and resolutions, better onscreen keyboards and more processing power.