SecurityWeek

A man from the Bahamas has been charged after allegedly hacking into the email accounts of celebrities in an effort to steal private files, including scripts for movies and TV shows, the U.S. Attorney’s Office for the Southern District of New York announced on Tuesday.

The Ramnit botnet, a threat disrupted by tech companies and European law enforcement in February, is back and it’s targeting online banking users in several countries.

Chris Vickery, the researcher who identified tens of misconfigured databases that exposed the credentials of millions of users, reported finding more vulnerable databases.

Microsoft on Monday announced plans to ban adware programs that use man-in-the-middle (MiTM) techniques to inject ads, starting March 31, 2016.

Google is considering rejecting SSL certificates that use the SHA-1 cryptographic hash function in Google Chrome on July 2016, half a year earlier than initially expected.

Researchers at Swiss-based security firm High-Tech Bridge have identified serious vulnerabilities in several popular web applications.

A honeypot set up by researchers has shown that attackers have already attempted to exploit a recently disclosed vulnerability that can be used to gain administrative access to Juniper Networks’ NetScreen firewalls.

A rite of passage for new parents is child-proofing—securing the home from threats to children. Most experts on the subject highly recommend that parents make their way around the house on their hands and knees in order to experience the environment from a child’s perspective. This may be the only way to see the threats that aren’t obvious from an adult’s point of view.

Software giant Oracle has agreed to settle with the U.S. Federal Trade Commission over charges that it deceived customers about the security of the Java platform.

Technology company Apple criticized draft British legislation designed to stiffen surveillance powers on Monday, saying the proposed bill could "spark serious international conflicts", British media reported.

Operation Black Atlas, a campaign aimed at infecting point of sale (PoS) systems around the world, has managed to infect more companies and is using the modular Gorynych/Diamond Fox botnet to exfiltrate data, Trend Micro researchers warn.

An exploit for a recently patched Adobe Flash Player vulnerability has been added to the Angler exploit kit and it has been used by cybercriminals to deliver the file-encrypting ransomware known as TeslaCrypt.

Stolen medical information is an issue that affects 18 out of 20 industries, making the problem more widespread than previously believed, Verizon’s 2015 Protected Health Information Data Breach Report reveals.

The Payment Card Industry Security Standards Council (PCI SSC) has set a new deadline for when organizations that process payments should complete the migration off vulnerable SSL and early TSL encryption.

Google has announced plans to dedicate $1,000,000 to fund grants for independent security research in 2016.

Schneider Electric has started releasing firmware updates to address a high severity vulnerability affecting the company’s Modicon M340 programmable logic controller (PLC) product line.

Traditional endpoint antivirus, which relies on static signatures to identify malicious files, URLs and IP addresses has outlived its useful life. New attack techniques, including polymorphic malware, packers and wrappers — can make a known binary appear completely new and therefore undetectable by antivirus.

Chinese hackers are targeting Taiwan's opposition party and journalists, security experts and officials said Monday, weeks away from a presidential election likely to usher in a Beijing-sceptic government. The move could be a ploy to obtain election-related information, experts said.

Security experts have been analyzing the Juniper Networks firewall backdoors whose existence was brought to light last week, and they’ve discovered what appears to be the root cause for both the administrative access and VPN decryption issues.