SecurityWeek

A new banking Trojan dubbed “Brolux” has been spotted targeting online banking users in Japan, researchers at ESET have warned.

Enterprise software maker SAP has released patches to address a series of high severity vulnerabilities affecting various products.

Adobe announced on Wednesday that it expects to release a patch for the recently disclosed Flash Player zero-day exploited in targeted attacks by a Russian threat group during the week of October 19.

Uber on Wednesday confirmed that a software slip briefly exposed personal data of hundreds of US drivers. The controversial ride-sharing company said that it stomped out the bug within a half-hour of getting word of the problem from a driver on Tuesday.

Thousands of online shops powered by eBay’s Magento ecommerce platform could be vulnerable to hacker attacks due to a security hole in a popular third-party tool.

Law enforcement authorities in the United States and Europe have teamed up with private cybersecurity organizations in an effort to disrupt the activities of the Dridex botnet.

Google announced on Tuesday the release of Chrome 46, a version that patches several serious vulnerabilities and simplifies the security icon displayed for each website.

The six security bulletins released by Microsoft for October 2015 address more than 30 vulnerabilities affecting Windows, Internet Explorer, Edge, and Office.

Updates released on Tuesday by Adobe for Flash Player, Reader and Acrobat address a significant number of vulnerabilities that expose the users of these products to hacker attacks.

A report published on Tuesday by Trend Micro provides a detailed view of Japan’s cybercriminal underground which, despite being in its infancy, has all the elements needed to thrive.

Visa and FireEye today launched Visa Threat Intelligence, a new offering powered by FireEye that delivers real-time threat information to merchants and payment card issuers.

Cybereason, a Cambridge, Mass.-based provider of threat detection solutions, announced on Tuesday that it has closed a $59 million Series C funding round led by SoftBank.

America’s Thrift Stores informed customers on Friday that their payment card details might have been stolen by a piece of malware planted on the company’s systems by cybercriminals allegedly located in Eastern Europe.

A paper published aims to demonstrate that developing rootkits for devices running Cisco IOS doesn’t require advanced knowledge or the resources of a nation state.

Symphony, a financial industry messaging startup, announced Monday that it has raised $100 million in a new round of funding from backers that included Google. An encrypted messaging platform launched by the year-old company has become a fast-growing rival to a service offered by Bloomberg.

Energy management giant Schneider Electric has patched a cross-site scripting (XSS) vulnerability on one of its websites.

Malicious Rich Text Format (RTF) documents are often used to spread malware, and a recent attack campaign targeting the Israeli public sector has been using RTF files to inject the Zeus Trojan.

A vulnerability in HP SiteScope can be exploited by an attacker to execute arbitrary operating system commands, security firm Rapid7 has warned.HP SiteScope is an agentless software designed for monitoring the performance and availability of distributed IT infrastructures, including servers, network services and devices, applications, and operating systems.

Kaspersky Lab has rolled out updates for its Internet Security and other products to address a design flaw that could have been exploited to prevent the company’s customers from accessing certain legitimate resources.