SecurityWeek

A new Gozi Trojan build has been observed in the wild, modified to inject malicious code into Windows 10’s Edge browser, IBM X-Force researchers warn.

A judge has ordered Apple to help the FBI search an iPhone belonging to the man who shot and killed 14 individuals in San Bernardino in December, but the tech giant will not give in without a fight.

A new piece of malware targeting Android devices has been found, which exhibits multiple malicious activities, ranging from stealing banking credentials and credit card information, to encrypting files on external storage, researchers at Palo Alto Networks warn.

A vulnerability fixed only partially by eBay earlier this month because it was unlikely to be exploited has been leveraged by cybercriminals for phishing attacks and car sale scams, according to UK-based security firm Netcraft.

Google has released a Chrome update to patch a critical vulnerability reported by a researcher who has asked the search giant not to reveal his identity.

Twitter has addressed a privacy bug that exposed email addresses and phone numbers associated with roughly 10,000 user accounts.

Tens of thousands of WordPress websites have been recently used to launch Layer 7 distributed denial of service (DDoS) attacks, security researchers at Sucuri reveal.

Vera, a Palo Alto, Calif.-based data protection startup, has closed a $17 million Series B funding round led by Sutter Hill Ventures, bringing the total amount raised by the company to more than $31 million.

Instagram, Facebook’s mobile photo-sharing and video sharing service, is finally getting a long requested security feature...two-factor authentication.

The United States Department of Defense (DoD) has directed all U.S. DoD agencies to upgrade devices within their organizations to Microsoft Windows 10 by February 2017.

Security researchers have discovered a new piece of ransomware called Locky, which uses AES encryption algorithm to encrypt both local files and files on network shares, even if they are unmapped.

The financial services industry is among the most heavily targeted sectors by cybercriminals. In 2015 we saw a surge in attacks that involved extortion, social engineering, credential-stealing malware and sophisticated threats. In order to better defend against these unrelenting and increasingly malicious attacks, financial institutions must continually strive to understand the threats and the actors behind them.

A researcher at IOActive discovered that home security systems from SimpliSafe are plagued by a vulnerability that allows tech savvy burglars to remotely disable the alarm without knowing the PIN.

Researchers at Bitglass have tracked the journey of a series of fake accounts “leaked” to the Dark Web to have an overview of login attempts and how such data travels across the underground.

For the past several years, enterprise security leaders have been challenged with the task of locking down endpoints with traditional security solutions that are proving to be ineffective against todays threats.

Tens of thousands of digital video recorders (DVRs) used to store footage captured by surveillance cameras can be easily accessed by remote hackers because their web interface is either protected by a hardcoded password or no password at all.

A Chinese firm has splashed out $6 billion for a US tech firm that distributes products for Apple and Microsoft, the latest eye-popping acquisition by a Chinese company seeking greater profits abroad as the economy slows down at home.

Google and others applaud Apple’s decision to refuse the FBI’s request for the creation of a backdoor to the iPhone, but some U.S. politicians lashed out against the company for not complying with the court order.

The Hollywood Presbyterian Medical Center in Los Angeles has decided to pay a ransom demanded by a piece of ransomware that infected the organization’s computers earlier this month.