SecurityWeek

A researcher says there are 127 ipTIME router models plagued by a critical vulnerability that can be exploited by an unauthenticated attacker to remotely execute arbitrary code on affected devices.

Version 2.0.0.0 of a toolkit for the banking Trojan known as KINS was leaked last month, researchers revealed on Sunday.

Hacking Team, a controversial Italy-based company that develops and sells surveillance technology to governments worldwide, has been breached. The attackers have leaked hundreds of gigabytes of sensitive information allegedly obtained from the company’s systems.

Aside from listening in on Brazilian President Dilma Rousseff's phone calls, US spies also targeted top political and financial officials, according to new information released by WikiLeaks on Saturday. The whistle-blowing website published a National Security Agency list of 29 Brazilian government phone numbers that the American spy group monitored.

The Industrial Control System Information Sharing and Analysis Center (ICS-ISAC) announced this week that it would merge with Webster University's Cyberspace Research Institute (CRI). 

Firefox 39 was released on Thursday, and the latest version of Mozilla’s web browser addresses two-dozen vulnerabilities, including several issues that have been rated as critical.

The ad fraud Trojan known as Kovter has been updating Adobe Flash Player and Microsoft Internet Explorer on infected systems, most likely in an effort to keep other malware out.The French security researcher known as Kafeine discovered this new Kovter trick when he noticed that some of his virtual machines were attempting to download the latest version of Flash Player.

Researchers at mobile security firm Lookout have come across a piece of malware that abuses the accessibility service in Android to steal sensitive data from infected smartphones.

Cyber risk intelligence startup SurfWatch Labs has launched a new service that provides customers with customized research and intelligence from the Dark Web. For $100,000 per year, the company says customers can get focused, in-depth research and analysis of the their high level threat and risk environment from places on the Web not indexed by popular search engines.

German Chancellor Angela Merkel's office asked the US ambassador to come in Thursday to discuss new allegations of NSA spying, which threaten to drive a new wedge through transatlantic ties.

While conducting security tests on its products, Cisco identified a serious vulnerability in the Cisco Unified Communications Domain Manager (CDM) platform software that can be exploited to take full control of affected systems. The company has released software updates to address the issue.

Recently I attended Gartner’s Security and Risk Management Summit outside Washington, D.C. Early in the week, I had a discussion with a security professional who asked me, skeptically, if mobile threats were actually something he had to worry about. He explained that mobile malware and mobile breaches were small blips on the security threat horizon.

The creators of Plex, the popular suite of software and services used for organizing and streaming digital media, are advising customers to change their passwords after a hacker breached at least one of the company’s servers.

Harvard University revealed on Wednesday that some of its IT networks have been breached.

The Payment Card Industry Security Standards Council (PCI SSC) announced this week an update to the Point-to-Point Encryption (P2PE) standard.

Trump Hotel Collection is working to determine if its payment systems have been breached by cybercriminals after several U.S. banks identified fraudulent activity on cards used at the company’s hotel properties.

Telecom giant Level 3 Communications announced on Wednesday that it has paid an undisclosed cash sum to acquire Black Lotus, a provider of Distributed Denial of Service (DDoS) mitigation services.

German telecom giant Deutsche Telekom has teamed up with Intel Security on a joint research project to develop and deploy honey pots that can be embedded in any device, including smartphones and other connected (IoT) devices.

A vulnerability in the 802.11n wireless networking standard can be exploited by a remote attacker to target wireless networks, researchers have warned.

The Higher the Value of the Intellectual Property of Your Enterprise, the Higher the Likelihood You will Experience an Insider Incident