SecurityWeek

Six Nigerian nationals have been extradited from South Africa for their alleged role in Internet scams involving dating websites and work-at-home schemes, the US Department of Justice said Monday.

CrowdStrike, a provider of endpoint protection and security intelligence solutions, announced on Monday that it has company has completed a $100 million Series C financing round, led by Google Capital.

PHP 5.6.11, 5.5.27 and 5.4.43 were released last week. The latest versions of the popular scripting language address numerous functionality bugs and several security issues.

Researchers at Symantec have analyzed Seaduke, one of the Trojans used by the advanced persistent threat (APT) actor behind the “Duke” malware family.Detected by the security firm as Trojan.Seaduke, the threat has been used by the cyber espionage group in attacks against high-value targets, mainly government organizations.

A notorious cyber espionage group has been using a Java zero-day exploit in attacks aimed at the armed forces of a NATO member country and a defense organization based in the United States, Trend Micro reported over the weekend.

United Arab Emirates police have busted a cell of three Nigerian hackers who targeted US bank accounts, the interior ministry said Sunday. The trio were arrested following a tip-off from police in California about "cyber-criminal activity based in the UAE", a statement said.

Security Teams Must Always Keep the Entire Attack Lifecycle in Perspective 

Researchers have identified exploits for two new Adobe Flash Player zero-day vulnerabilities in the Hacking Team leak. Adobe has promised to patch the newly discovered bugs sometime this week.

The director of the US Office of Personnel Management resigned Friday after a devastating hack of government databases that saw the personal information of millions of federal workers and contractors stolen.

Google has shared some details on the systems it has implemented to protect its customers against spam emails. The search giant has also released a new tool to help organizations ensure that their emails don’t end up in the spam folder.

TrapX Security, a Silicon Valley-based startup that offers a deception-based cyber defense platform, today announced that it has raised $9 million in its Series B round, led by investors Intel Capital and Liberty Israel Venture Fund together with current investors BRM Group and Opus Capital.

The Adobe Flash Player exploit stolen by hackers from spyware maker Hacking Team has been leveraged by advanced persistent threat (APT) groups, according to security solutions provider Volexity.

VMware has released software updates for several of its products to address a vulnerability that can be exploited to elevate privileges and execute arbitrary code on affected systems.

Splunk, a provider of software that helps organizations gather and make use of machine data from a various sources, announced on Thursday that is has acquired Caspida, a maker of machine learning and behavioral analytics software.

A security bug in a backup mechanism of the Android operating system can be exploited to install malicious apps on vulnerable devices, researchers have warned. Google has confirmed the existence of the flaw, but the search giant says it’s a “low severity” issue.

Hackers who breached US government databases stole personal information from background checks of 21.5 million people, officials said Thursday following an investigation into the massive attack widely blamed on China.

An Estonian national believed to be the mastermind behind a massive cyber fraud operation shut down by law enforcement authorities in 2011 has pleaded guilty to wire fraud and hacking charges.

The developers of OpenSSL have released versions 1.0.2d and 1.0.1p to address a high severity vulnerability that can be exploited by an attacker to bypass certain untrusted certificate checks and issue invalid certificates.

Researchers have come across a massive ransomware campaign in which attackers continuously generate new variants of the same malware in an effort to evade detection.

The Adobe Flash Player zero-day leaked earlier this week was used in limited attacks before the data breach suffered by spyware maker Hacking Team came to light.