SecurityWeek

Researchers have found a connection between the recently uncovered CoreBot malware and an online shop that specializes in selling account information associated with various websites and services.

Secunia, a Copenhagen, Denmark provider of vulnerability management solutions said on Tuesday that it bas been acquired by enterprise software firm Flexera Software for an undisclosed sum.

Researchers at FireEye-owned security firm Mandiant have spotted more than a dozen Cisco routers on which attackers planted malicious firmware that allows them to maintain persistence in the targeted organization’s network.

Developers of mobile travel applications are more focused on features that boost the user experience than on ensuring increased security for their programs and customer data, a recent report from Bluebox Security reveals.

The Securities and Exchange Commission (SEC) last month announced bringing charges against tens of individuals and companies allegedly involved in an illegal trading scheme. Two of the defendants have agreed to pay $30 million to settle the charges.

A flaw in the Transport Layer Security (TLS) protocol can allow man-in-the-middle attackers to access apparently encrypted communications, researchers have warned.

Intel has unveiled a new initiative designed to help the automotive industry mitigate cybersecyrity risks associated with connected automobiles, and today announced the formation of the Automotive Security Review Board (ASRB).

A recently discovered piece of malware allows cybercriminals to physically steal credit and debit cards inserted into automated teller machines (ATMs), researchers at FireEye warned on Friday.

Google Search Console, known until May 2015 as Google Webmaster Tools, has been abused by malicious actors to improve blackhat search engine optimization (SEO) techniques and hide their presence on hijacked websites.

The systems of the United States Department of Energy were breached more than 150 times between October 2010 and October 2014, USA Today reported this week based on records obtained through the Freedom of Information Act (FOIA).

A young American who assumed the online identity of an Australian jihadist has been arrested for an alleged plan to bomb a September 11 memorial event, authorities said.

Updated "Sideloading" Process in iOS 9 Boosts App Security

Japan-based industrial automation and control company Yokogawa Electric has started releasing patches to address three critical vulnerabilities affecting many of the company’s industrial control system (ICS) products.According to an advisory published by Yokogawa on Thursday, the vulnerabilities are related to network communication functions.

With enough data, any problem can be understood. Solving it is another matter.

A new Android screening-locking malware targeting mainly users in the United States has been discovered by ESET researchers, who say this is the first ransomware to change a smartphone’s PIN security code.

IBM reported in August that its researchers had come across CoreBot, a new piece of malware designed to steal data from infected devices. Initially, the threat only had limited capabilities, but IBM now says CoreBot has become a full-fledged banking Trojan.

Excellus BlueCross BlueShield (BCBS), a non-profit health insurer based in Rochester, New York, revealed on Thursday that malicious actors had access to its IT systems for more than a year and a half.

A top US intelligence official warned Thursday of an evolving cyber security threat that will see criminals not just stealing data, but actively altering or deleting it.

Cisco has revealed the existence of denial-of-service (DoS) vulnerabilities in several of its security products. Customers are advised to apply workarounds since software updates are not available for most of the issues.

Argus Cyber Security Raises $26 Million in Series B Funding Round To Help Protect Vehicles From Cyber Attacks