SecurityWeek

South Korea's spy agency said Tuesday that North Korea had hacked into smartphones belonging to a number of key government officials, part of a series of cyber-attacks launched after its fourth nuclear test.

A researcher says he has earned $15,000 for informing Facebook of a vulnerability that could have been exploited to reset the password of any user account.

Jeremiah Grossman Leaving WhiteHat Security After 15 Years WhiteHat Security founder Jeremiah Grossman announced on Monday that he will be leaving the application security firm he started nearly 15 years ago.

Pawn Storm, the cyber espionage group linked by some researchers to Russia, has recently started targeting government and news organizations in Turkey, Trend Micro reported on Monday.

The W-2 tax documents of several thousand current and former employees of data storage company Seagate ended up in the hands of fraudsters after an employee fell victim to a phishing attack.

Apple’s iOS 9.0, 9.1, and most recent 9.2.1 releases contain multiple connected passcode protection bypass vulnerabilities that affect both iPhone and iPad devices, researchers at Vulnerability Lab warn.

Custom Content Type Manager (CCTM), a WordPress plugin with over 10,000 active installations, recently turned rogue and started stealing admin credentials via a backdoor, researchers at Sucuri discovered.

A piece of ransomware designed to target OS X systems has been delivered to users via the official installer for the BitTorrent client Transmission.

Don’t Rush to Satisfy That Hunger Until You Can be Sure of What You Need...

After killing support for full disk encryption on its Kindle Fire devices and quietly removing it from Fire HD and Fire HDX 8.9 tablets with the release of Fire OS 5 in February, Amazon has had a change of heart.

Romanian Court Approves Extradition of Hacker "Guccifer" to United StatesMarcel Lazar Lehel, the 42-year-old Romanian national known as “Guccifer” and accused of breaching the online accounts of several public figures, will be extradited to the United States.

A reflected cross-site scripting (XSS) vulnerability in a login page used to access some Fortinet product services could have been exploited for highly efficient phishing attacks, a researcher reported on Friday.

A new piece of ransomware has been discovered that speaks to its victims in order to inform them that their files have been encrypted.

Researchers at Trend Micro recently observed a change in the Dridex and Locky macro malware families, which are now using Form object in macros to obfuscate their malicious code.

Amazon has decided to kill support for encryption on its Kindle Fire devices and quietly removed it from Fire HD and Fire HDX 8.9 devices with the release of Fire OS 5 in February.

An FBI demand that Apple unlock an iPhone risks setting a dangerous precedent that could have a chilling effect on human rights, the United Nations rights chief warned Friday.

Adobe announced on Thursday that it will release security updates next week to patch vulnerabilities in Acrobat and Reader products.

Security firm Rapid7 has conducted a year-long study to find out which are the usernames and passwords most commonly used by malicious actors in criminal and opportunistic attacks.

A broad array of technology firms and activists joined Apple's legal fight over encryption Thursday, warning of a dangerous precedent if the company is forced to help the government break into a locked iPhone.