SecurityWeek

China's cyberspace administration is "complicit" in attacks on major Internet companies including Google, an anti-censorship group said Wednesday, calling on firms worldwide to strengthen their defenses. Beijing dismissed the accusation and called for all sides to "abandon accusing each other without proof".

Cybercriminals have been using the Vawtrak Trojan in an ongoing campaign targeted at Canadian online banking users, Denmark-based Heimdal Security reported on Tuesday.

It is no secret that enterprises sometimes have trouble keeping a handle on privileged users. In the wrong hands, excessive privileges can lead to data breaches and sleepless nights for IT.

Lookingglass Cyber Solutions, an Arlington, VA-based provider of threat intelligence solutions, announced on Tuesday that it has raised $20 million in new capital through a Series B round of funding.

Mozilla has released Firefox 36 updates to address the vulnerabilities presented by white-hat hackers at Pwn2Own 2015, the competition that took place last week at the CanSecWest security conference.

Twitch, the popular video game streaming service acquired by Amazon last year for $970 million, has notified customers that their account information might have been accessed by an unauthorized third party.

Palo Alto Networks today shared details of a security vulnerability in the Android operating system that could allow an attacker to hijack the installation of a what appears to be a legitimate Android application and modify or replace it with malware.

Unauthorized certificates for several Google domains were issued earlier this month by an Egypt-based company that obtained an intermediate certificate from the China Internet Network Information Center (CNNIC), the search giant reported on Monday.

Having spent a considerable portion of time in the security industry, I’ve learned a thing or two along the way including that some of the lessons I took for granted earlier in my career are just wrong. Take, for example, the old analogy about the hikers and the bear. You’ve likely heard it, and odds are if you’re a security professional you’ve told it. I know I have.

BitWhisper: Stealing Data From Isolated Computers Using Heat Emissions and Built-in Thermal SensorsResearchers at the Ben Gurion University in Israel have demonstrated that two computers in close proximity to each other can communicate using heat emissions and built-in thermal sensors.

When Florida police got a call from a man who said he shot four people at rapper Lil Wayne's house this month, they responded as they are trained to. Heavily armed, flanked in body armor and accompanied by sniffer dogs, officers surrounded the Miami mansion after the alleged shooter told the 911 dispatch: "I'm killing whoever else I see..."

Distributed denial-of-service (DDoS) attacks are being leveraged to circumvent cybersecurity solutions, disrupt service availability and infiltrate victim networks, according to a new report from Corero Network Security.

The notorious remote access Trojan (RAT) known as njRAT is making a comeback, according to security firms Zscaler and PhishMe.

A debate recently arose within our technical teams, which I feel reflects an industry topic that merits discussion. The term “cybersecurity” has taken on prominence, particularly with the general public, and also with commercial customers. It appears in news headlines, books and more recently, as a corporate initiative rallying cry. Yet for our security specialists, who spend their days deep within industrial systems, the standalone term “cyber” has distinct connotations.

An exploit for a Flash Player vulnerability patched recently by Adobe has already been integrated into at least two exploit kits, security firms reported.

The malicious actors behind a recently launched phishing campaign aimed at American Express customers leveraged a weakness in email authentication systems to increase the chances of their bogus messages reaching their destination.

Researchers at Proofpoint discovered a crafty new trick in the repertoire of the Dridex banking malware. Well known for leveraging macros in Microsoft Office documents to infect computers, Dridex now includes the ability to allow the malware to hold off executing until the malicious document is closed.

The 

Some of the IP phones designed by Cisco for small businesses are plagued by a vulnerability that allows a remote attacker to eavesdrop on conversations and make phone calls from affected devices, the company revealed last week.

UK-based Darktrace, a cyber security startup that leverages machine learning and mathematics to detect threats, announced this week that it has raised $18 million in funding.