SecurityWeek

A vulnerability discovered in WhatsApp Web, the web-based extension of the WhatsApp mobile application, can be exploited by attackers to trick users into executing arbitrary code on their machines.

A Latvian cybercriminal who helped in the creation of malware that infected over one million machines globally and resulted in tens of millions of dollars in losses, has pleaded guilty to conspiring to commit computer intrusion.

Enterprise mobility management (EMM) has a place in today’s mobile environment, however, it is only the starting point when thinking about mobile security.

The notorious Angler exploit kit has started leveraging the Diffie-Hellman cryptographic algorithm to make it more difficult to detect exploits and prevent researchers from analyzing them. Kaspersky Lab has managed to successfully attack the implementation used by cybercriminals.

Microsoft announced on Tuesday that it has acquired Adallom, an Israeli security startup that helps organizations protect data in cloud applications.

Avira and Webroot have updated their mobile security applications for iOS to address vulnerabilities that could have been exploited in man-in-the-middle (MitM) attacks.

Kaspersky Lab has pushed out an update to address a serious antivirus vulnerability reported over the weekend by a Google security engineer.

An unpatched vulnerability affecting PayPal’s mobile applications can be exploited to access restricted accounts and even bypass the two-factor authentication (2FA) mechanism, a researcher claims.

Fiat Chrysler Automobiles (FCA) wants to update the software on roughly 7,810 of its SUVs to address an issue that can be exploited to remotely hack the vehicles.

An attacker had access to a privileged account on Mozilla’s Bugzilla bug tracker for at least a year and is believed to have accessed the details of 185 non-public vulnerabilities before the breach was discovered.

Former US intelligence contractor Edward Snowden on Saturday criticized Russia -- the country that has granted him asylum -- calling its crackdown on human rights and online freedom "fundamentally wrong" and said he would prefer not to live in exile.

Schneider Electric has released firmware patches to address a couple of vulnerabilities affecting some of the company’s Modicon programmable logic controller (PLC) products.

The LinkedIn accounts of security specialists have been recently assaulted with recruitment requests from a series of fake accounts in what appears to be an attempt to map their networks.

Smartphone maker BlackBerry (NASDAQ: BBRY; TSX: BB) said on Friday that it has entered into a definitive agreement to acquire secure mobility solutions provider Good Technology for $425 million in cash.

The current environment around cybercrime is quickly becoming a forcing function that’s causing businesses to begin evaluating how they’re doing cybersecurity across the board.

Vulnerabilities Found in OrientDB Patched by Developer

Cisco has released software updates to patch a remotely exploitable vulnerability affecting the company’s UCS Director and Integrated Management Controller (IMC) Supervisor products.

Sony Pictures has reached an undisclosed agreement in principle with eight former employees who had sued over inadequate protection of their personal data during last year's major hack against the studio.

Systems and security management company Tanium announced this week that it has secured an additional $120 million in funding from a handful of investors, bringing the total raised by the software maker to a whopping $262 million.

Despite being criticized that it collects customer experience and diagnostic telemetry data in Windows 10, Microsoft decided months back that it would also add the same capabilities into in-market Windows 7 and Windows 8 devices, and has done so via a series of updates that arrived on these platform versions earlier this year.