SecurityWeek

The hacking group behind the Ashley Madison breach compared the affair-seeking website to "a drug dealer abusing addicts" in an email exchange threatening to carry out more attacks.

A researcher says BMW was informed of the mobile app vulnerability that allows hackers to locate and unlock cars months before the attack method was disclosed.

DENIC and Nic.at, the country code Top Level Domain (ccTLD) registry operators for Germany’s .de and Austria’s .at domains, have been accused of failing to prevent malicious actors from abusing their services.

Researchers at cloud security company Zscaler have spotted a campaign in which attackers are redirecting victims to malware-serving websites with the aid of thousands of hijacked WordPress sites.

Facebook announced on Thursday that it has simplified the application process for security teams that want to join the ThreatExchange threat intelligence sharing platform.

Hackers released what was purported to be a second batch of data from the affair-seeker website Ashley Madison, a report said Thursday.

Kaspersky Lab has analyzed the activities of Blue Termite, an advanced persistent threat (APT) group focusing its efforts on Japanese organizations.

The developers of Drupal, the open source content management system (CMS) currently used by more than 1.1 million websites, have address several security issues with the release of versions 7.39 and 6.37.

Malicious actors have leveraged the critical Internet Explorer vulnerability patched by Microsoft on Tuesday to deliver a piece of malware through various legitimate websites, including the one of a Hong Kong church.

iOS Sandbox Vulnerability Puts Enterprises at RiskOrganizations using mobile device management (MDM) solutions are exposed to cyberattacks due to a vulnerability uncovered by researchers in the third-party app sandbox of the Apple iOS operating system.

Japanese police will re-arrest the CEO of collapsed Bitcoin exchange MtGox on theft allegations, reports said Thursday, as he faces questions over the disappearance of hundreds of millions of dollars worth of the virtual currency.

WordPress 4.3, dubbed “Billie” in honor of jazz singer Billie Holiday, is available for download. The latest version introduces new features for both website administrators and developers, along with significant password security improvements.

The Linux Foundation’s Core Infrastructure Initiative (CII), a project that aims to bring technology companies together with the goal of identifying and funding critical open source projects, announced on Tuesday that it’s developing a new security-focused badge program.

“Why do you rob banks?”—Reporter“Because that’s where the money is.” —Willie Sutton

Network security firm Palo Alto Networks unveiled its latest and most powerful next-generation firewall on Tuesday, described by the company as a powerful and scalable device suited for operation in service provider, large enterprise, and Internet gateway environments.

AlienVault, a provider of security management tools and threat intelligence solutions, announced on Wednesday that has closed a $52 million Series E funding round, bringing the total raised by the company to nearly $116 million.

Adobe has released a security hotfix to address an XML External Entity (XXE) vulnerability in LiveCycle Data Services (DS).Adobe LiveCycle Data Services is a framework that simplifies the development of Flex and AIR applications. The solution provides data enabling capabilities such as synchronization, paging, conflict management and publish-subscribe messaging.

The hackers who breached the online adultery website Ashley Madison last month made good on their promise to leak customer details.

Emissary Panda Using Hacking Team Exploits to Deliver RATThe Chinese advanced persistent threat (APT) group known as Emissary Panda and Threat Group 3390 has been using Hacking Team’s Flash Player exploits in its operations.

Domain registrar and web hosting firm Web.com said on Tuesday that hackers made away with credit card and personal information of roughly 93,000 of its customers after breaching a server operated by the company. Web.com said that it discovered the breach of one of its computer systems on August 13, 2015 through its ongoing security monitoring.