SecurityWeek

Amazon announced on Tuesday the availability of AWS WAF, a web application firewall that helps Amazon Web Services customers protect their apps from common exploits.

Cisco says it has caused significant damage to the operations of a cybercriminal group that might have made millions of dollars using ransomware distributed with the aid of the notorious Angler exploit kit.

While monitoring the activities of the advanced persistent threat (APT) actor known as Winnti, researchers at Kaspersky Lab discovered a new platform that the group has been using to maintain persistence on infected systems and deliver backdoors.

Few in America's Silicon Valley could have predicted that a young Austrian law graduate who spent a semester studying there would one day become high-tech companies' worst nightmare.

Google on Monday released a security update for Nexus devices, aimed at resolving recently disclosed critical security vulnerabilities the media playback engine in Android, called Stagefright 2.0.

Cisco has announced a new and more streamlined format for disclosing security vulnerabilities in an effort to make it easier for network administrators to prioritize their response.

Malicious actors breached an organization’s systems and maintained persistent control over its network for months via an Internet-facing webmail server.

The nuclear industry still doesn’t fully understand the risk posed by cyberattacks, according to a new report published on Monday by Chatham House.The report, focusing on cybersecurity at civil nuclear facilities, is based on interviews with 30 industry practitioners, academics and policymakers from the U.K., Canada, the U.S., Ukraine, Russia, Japan, France and Germany.

North Korea is suspected of having launched a cyber attack last year on the South Korean capital's subway system that carries millions of commuters every day, a Seoul lawmaker said Monday, citing intelligence reports.  

A piece of Apple iOS malware dubbed by researchers “YiSpecter” has been abusing private APIs and enterprise certificates to infect both jailbroken and non-jailbroken devices.

The developers of the popular Jetpack plugin for WordPress have patched a critical vulnerability that allows malicious actors to attack website administrators.

US online brokerage firm Scottrade said Friday it was notifying some 4.6 million customers about a hack into its database which could have leaked private information.

T-Mobile's chief executive has expressed outrage over a breach at a credit monitoring service that exposed private data from 15 million customers of the mobile carrier.

Experian on Thursday announced that a server containing information on T-Mobile customers was compromised, and that information of roughly 15 million individuals has been exposed.

PRAGUE - Virus Bulletin 2015 - A mysterious piece of malware has infected tens of thousands of devices across the world, but its operator hasn’t used them for any malicious purposes.

SecurityWeek is proud to announce that Philip D. Quade, Chief of the NSA Cyber Task Force and Special Assistant to the Director National Security Agency for Cyber, will deliver a keynote address at the 2015 ICS Cyber Security Conference, taking place Oct. 26-29 in Atlanta, Georgia.

PRAGUE - Virus Bulletin 2015 - Gatekeeper, the security feature designed to protect OS X users against malware downloaded from the Internet, can be easily bypassed by malicious actors, a researcher has warned.

PRAGUE - Virus Bulletin 2015 - An analysis of the vulnerabilities discovered in the systems of organizations in various industries provides some insight on the most common types of flaws and the time it takes to address them.