SecurityWeek

The actor behind the sophisticated cyberespionage tool dubbed “Regin” has not given up on its operations after its activities were exposed last year by security firms.

A report released on Wednesday by CloudLock reveals that one percent of employees in an enterprise are responsible for 75 percent of risk associated with cloud security.

The developers of Grsecurity, a set of patches designed to provide security enhancements to the Linux kernel, announced on Wednesday that the stable patches will no longer be publicly available starting two weeks from now.

Caroline Kennedy, the US ambassador to Japan and daughter of late president John F. Kennedy, was criticized on Tuesday for using private email for official business. The latest revelations about a high ranking diplomat were given greater resonance in the light of the scandal hanging over former secretary of state Hillary Clinton.

Flaw in PayPal “SecurePayments” Page Allowed Hackers to Steal Users’ DataPayPal has patched a serious vulnerability that could have been exploited by malicious actors to trick users into handing over their personal and financial details.

An application designed to exploit the recently disclosed “Certifi-gate” vulnerability affecting devices running Android has been removed from Google Play.

Sphinx, a new banking Trojan based on the source code of the notorious Zeus malware, is up for sale for $500.

Researchers at Symantec noticed that an exploit for a recently patched vulnerability affecting Internet Explorer (CVE-2015-2444) was added to the Sundown exploit kit. Sundown is the first EK to integrate an exploit for this particular flaw.

President Barack Obama will send his national security advisor Susan Rice to Beijing this week, hoping to work through tensions over cyber attacks, the South China Sea and financial turmoil ahead of Xi Jinping's visit to Washington.

The famous researcher Charlie Miller announced early on Tuesday that he is leaving the security team of the social media giant Twitter.The announcement -- made on Twitter, of course -- reveals only that Miller will be stepping down effective Friday.

The NATO Cooperative Cyber Defence Centre of Excellence (CCDCOE) announced today that Sven Sakkov has been appointed as its new director.

Recently, it seems like I’ve been hearing phrases like: “we need to get better at information sharing”, “we need to share more information”, or “information sharing is critical to success in information security” everywhere I go. These phrases trouble me, and I have a hard time understanding them. Not because I haven’t successfully leveraged information from a variety of sources (and shared in return) in an operational setting – indeed I have.

The U.S. Court of Appeals for the Third Circuit ruled on Monday that the Federal Trade Commission (FTC) can take action against companies that fail to take reasonable steps to protect their customers’ personal information.

IBM Security’s X-Force Threat Intelligence report for the third quarter of 2015 reveals that the Tor (The Onion Router) anonymity network is increasingly leveraged for malicious purposes.

Two possible suicides may be linked to the hacking of adultery website Ashley Madison and the release of its membership data, Canadian police said Monday. "As of this morning we have two unconfirmed reports of suicides associated to the leak of Ashley Madison customer profiles," Toronto police Staff Superintendent Bryce Evans told a news conference.

The creators of the notorious Dyre banking Trojan have started using some new techniques to make the malware more difficult to detect and remove.According to researchers at IBM, the developers of Dyre have decided to modify the threat’s persistence mechanism and replace run keys in the Windows Registry with task scheduling.

Apple has patched a total of nine vulnerabilities with the release of QuickTime 7.7.8 for Windows.According to an advisory published by Apple last week, the update addresses a series of memory corruption issues that can lead to the unexpected termination of the application or arbitrary code execution.

A researcher has advised customers of the Dolphin and Mercury web browsers for Android to switch to other applications after identifying a series of zero-day vulnerabilities that put users at risk.

Amazon announced last week its intention to stop accepting Flash-based advertisements for Amazon.com. The decision comes after major web browser vendors decided to implement restrictions for Flash content.

New Delhi  - Cyber spies most probably based in China have been snooping on Indian government bodies and universities since 2012 for sensitive material on its rival neighbor, Internet security company FireEye said Friday.