SecurityWeek

Twitter on Friday began sending notifications to several users, warning them that their accounts might be targeted by state sponsored attackers.

With renewed focus on how encrypted messages can be used to plot terrorist attacks, President Barack Obama's administration is stepping up pressure on the tech sector to help in the battle.

[Update] Google announced on Friday that it will remove a Symantec root certificate from Chrome, Android and other products over the coming weeks in an effort to protect its customers.

Researchers at Zscaler have been monitoring a new Spy Banker campaign targeting users in Brazil via attacks leveraging social media networks, the Bit.ly URL shortening service and Google’s cloud platform.

FireEye on Friday shared details on a recently discovered, highly obfuscated bot that has compromised companies around the world and remained largely undetected by anti-malware solutions since 2013.

ENISA, the European Union Agency for Network and Information Security, has analyzed the current maturity level of ICS/SCADA cybersecurity in Europe and provided recommendations for improvement.

The voyage data recorders used on ships are plagued by many serious vulnerabilities that expose the devices to hacker attacks, researchers have warned.

“You are chained,” said Scrooge, trembling. “Tell me why the chains bind you.” “I wear the chains I forged in life,” replied Marley. “I made it link by link, yard by yard. I fastened it on of my own free will. Is this strange to you?”

Popular WordPress hosting service WP Engine informed customers this week that their credentials may have been compromised in a security breach.

A well-funded and well-organized threat group that focuses its activities on Asian companies has been using Bifrose code to develop its own backdoors, Trend Micro reported on Thursday.

Palantir Technologies, the secretive data firm that works with military and law enforcement, has raised $679 million in funding, confirming its status as one of the richest tech startups.

Google this week announced Data Loss Prevention (DLP) for Gmail, designed to help Google Apps for Work customers keep their sensitive information secure.

SSL certificates that use the SHA-1 hash algorithm for their signature are expected to be rejected by major browsers over the course of 2016, but Facebook and CloudFlare are pledging for a delayed sunset of the cryptographic hash algorithm.

Cisco is preparing patches for a recently discovered Java deserialization vulnerability affecting many of the company’s products.

The number of Mac OS X systems infected with malware during the first nine months of 2015 is seven times higher than in all of 2014, Symantec reports.

Boards and Executives Don’t Want to Hear Solely About the Problem Anymore

Wyndham Worldwide has come to an agreement with the U.S. Federal Trade Commission (FTC) regarding the agency’s investigation into a series of data breaches at some of the hospitality giant's hotels.

The holiday season is well underway and so is the shopping frenzy. In an effort to avoid the crowds and save time, many consumers are turning to online shopping. In fact, Adobe’s new, “2015 Holiday Shopping Report,” finds that online shoppers will spend $83 billion dollars this year (up 11 percent from last year), an average of $305 each. That means more than 270 million shoppers will be making purchases online.

Domain Name System (DNS) root name servers were hit last week by unusually high query rates, causing timeouts for some valid, normal queries.

The number of new malware files detected each day dropped by roughly 15,000 in 2015 when compared to the last year, according to a recent report from Kaspersky Lab.