SecurityWeek

Google on Wednesday announced the availability of Chrome 48, a browser release that brings along 37 patches for various security vulnerabilities, including 8 that were reported by external researchers.

Rapid7’s HD Moore announced on Wednesday that he is leaving the Boston-based security company and joining a new venture capital firm.

The Dridex banking Trojan has been updated with a new attack methodology that leverages a similar redirection attack scheme used by the Dyre Trojan, IBM X-Force researchers warn.

FireEye announced on Wednesday that it has acquired cyber threat intelligence firm iSIGHT Partners, in a deal valued at up to $275 million.

An active Android threat in early 2016 is Asacub, a mobile malware Trojan that has been used to infect thousands of users in Russia in a recent SMS spam campaign, researchers warn.

Profit-driven attackers have been trying to infiltrate the finance departments of small and medium-sized businesses in the U.K., the U.S. and India in an effort to steal money from their bank accounts, Symantec has warned.

Organizations are Failing to Take Basic Precautions That Could Keep Attackers Out...

Apple has released a series of updates for the iOS and OS X platforms, aimed at resolving a series of security vulnerabilities in both products.

A total of 295 incidents involving critical infrastructure in the U.S.

A new version of Intel’s Driver Update Utility released on Tuesday patches an information disclosure flaw identified by researchers at Core Security.The Intel Driver Update Utility is designed to help users keep their drivers up to date by scanning their computers and installing the latest drivers available from Intel.

Oracle Critical Patch Update For January 2016 Addresses 248 Vulnerabilities Oracle’s Critical Patch Update (CPU) for January 2016 was released on Tuesday and brings 248 security fixes across multiple product families.

Even after tens of millions of people had online accounts hacked, many Internet users still rely on easily guessed passwords. A report released by the online security firm SplashData on Tuesday found the most commonly used by global Internet users were "123456" and "password" in 2015 -- unchanged since 2011.

Unisys Stealth Delivers Micro-segmentation for Amazon Web Services Cloud DeploymentsUnisys Corporation said on Tuesday that it has made its Unisys Stealth micro-segmentation security solution available for Amazon Web Services (AWS) Cloud customers.

The top US and European trade groups have warned their leaders of enormous fallout for businesses and customers if the two sides fail to reach a new deal on data transfers by end January.

Two Chinese soldiers were "co-conspirators" in a plot to steal US military secrets, including designs for the F-35 stealth fighter and other warplanes, a Canadian newspaper reported Tuesday.

A local privilege escalation vulnerability introduced in the Linux kernel in 2012 exposes tens of millions of Linux PCs and servers, and roughly two-thirds of phones and tablets running Android to malicious attacks.

Russian antivirus company Doctor Web reported finding a new Linux Trojan that appears to be designed to help cybercriminals spy on users.

Siemens has released firmware updates to address a reflected cross-site scripting (XSS) vulnerability affecting some of the company’s building automation products.

A researcher has been awarded $10,000 for responsibly disclosing a stored cross-site scripting (XSS) vulnerability in the web version of the Yahoo! Mail service.