SecurityWeek

Much of today’s Web content—news, search, free email and collaboration tools, video sharing and social media—is paid for by advertising. Ads are an effective “micro-payment” system loosely linked to consumption.

A new Trojan is stealing information from Android devices after gaining root access on them by using a commercial root tool and is affecting users around the world, researchers at Palo Alto Networks warn.

"FIN1" Attackers Use Hard to Detect BOOTRASH Malware to Steal Financial DataIncident responders from FireEye’s Mandiant group have discovered new tactics being used by cybercriminals to steal payment card data using highly sophisticated malware that hijacks the system boot process and executes before the operating system (OS) loads.

Technology giant Honeywell has released firmware updates for its Midas gas detectors to address a couple of high severity vulnerabilities that can be exploited even by low-skilled hackers.

JD Wetherspoon, a major pub chain operating in the UK and Ireland, informed customers last week that their personal information may have been stolen after hackers breached its website in mid-June 2015.

A Russia-linked cyber espionage group has been using new tools in attacks against defense contractors and other high profile targets, Kaspersky Lab reported on Friday.

Free and open certificate authority (CA) Let's Encrypt has entered public beta, making it even easier for websites to adopt the HTTPS encryption that the organization has been promoting since its inception.

A new malicious campaign aimed at infiltrating point-of-sale (PoS) systems around the world is currently underway, and taking advantage of powerful, highly adaptable tools, researchers at Trend Micro warn.

Just after the Paris attacks and the subsequent manhunt that ensued, Wired’s Kim Zetter wrote a very good piece centered around ISIS OPSEC and French law enforcement’s use of intelligence.

Law Enforcement and Tech Organizations Team Up To Disrupt Dorkbot Botnet

Open Whisper Systems, the group behind the Signal secure communication application for Android, this week announced the release of their encrypted messaging application for desktop computers.

Canadian mobile phone maker BlackBerry on Dec. 1 started pushing out the first software update for its Android-based BlackBerry PRIV smartphones, which includes the first security patches for the device.

Microsoft on Wednesday announced the availability of a preview of Azure Container Service (ACS), providing customers with the ability to manage multiple virtual machines acting as container hosts.

The OpenSSL Project released on Thursday versions 1.0.2e, 1.0.1q, 1.0.0t and 0.9.8zh of the cryptographic software library to fix several security flaws and functionality bugs.A total of three vulnerabilities classified as “moderate” severity have been patched in the latest versions.

Fox-IT, the security firm recently acquired by NCC Group for $142 million, has published a report on Ponmocup, a sophisticated botnet that has been used over the past years by cybercriminals for financial gain.

Early morning on our annual Thanksgiving pilgrimage I noticed a nontrivial number of cameras along our route on Interstate 95 as we were leaving Northern Virginia. Left to entertain myself by my sleeping passengers, I began to contemplate their meaning.

Researchers at security firm Rapid7 discovered that the latest firmware version for some Advantech EKI products is plagued by several known vulnerabilities.Advantech EKI are Modbus gateways designed for connecting serial devices to TCP/IP network-based devices in industrial control environments.

Researchers have conducted an analysis of popular mobile broadband modems and routers from various vendors and discovered that the devices are plagued by serious vulnerabilities that can be leveraged in malicious attacks.

Avecto, a UK-based endpoint security software company, announced on Wednesday that it has taken a $49 million investment from growth equity firm JMI Equity.

The Electronic Frontier Foundation (EFF) has filed a complaint with the United States Federal Trade Commission (FTC), claiming that Google is spying on students with the help of Chromebooks.