SecurityWeek

Cyber attacks are increasingly sophisticated and discrete. Nation states and cybercriminal organizations frequently bankroll and mastermind these attacks with the aim of financial or political gain. If attackers have high-powered backing behind them, shouldn’t defenders as well? Isn’t it time that organizations’ top leaders are actively engaged in defense? Granted, the vast majority of enterprises have an executive with direct responsibility for security.

Proposed changes to a rule that governs the issuance of search warrants would make it easier for the United States government to obtain permission to remotely hack into computers, but Google warns that the amendment could have serious implications for privacy and security.

Even as cyber-threats circulate, the boards of directors at many enterprises continue to remain out of the loop when it comes to security.

The European Union Agency for Network and Information Security (ENISA) has published a new study on the challenges of developing certification schemes for cybersecurity professionals in the field of Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA).

Many Lenovo users started complaining last year about a piece of adware being pre-installed on their new computers. After a close analysis, experts have determined that the application poses serious security risks.

A new survey by Enterprise Strategy Group found that improving incident response and detection are driving plans to invest in endpoint security technologies in 2015.

Network security firm Check Point Software Technologies announced on Wednesday that it has acquired Hyperwise, a privately held, security startup focused on CPU-level threat prevention technology.

For several years now, cybercrime in the financial sector was synonymous with banking botnets such as Zeus and Carberp. By and large, these malware families and their many descendants worked by infecting banking customer’s computers and either stealing passwords or manipulating online banking sessions to steal funds.

A piece of malware installed on the systems of Seattle-based casual gaming company Big Fish Games has been used to steal customer payment information.

Researchers at Kaspersky Lab have conducted a detailed analysis of some of the plugins used by the advanced persistent threat (APT) group known as BlackEnergy2 (BE2), or Sandworm Team.

CAVIRTEX, one of Canada’s biggest Bitcoin exchanges, announced on Tuesday that it’s shutting down its operations as a result of a potential security breach.

A combination of vulnerabilities could have allowed a malicious hacker to delete any comment on Facebook, according to a researcher.

Washington  - Iran is "good," China and Russia are "very good," but North Korea's cyberattack capabilities are actually not that great, according to an impromptu ranking by US President Barack Obama.

The identity and access management (IAM) space will need to evolve to meet the needs of the Internet of Things (IoT), according to analyst firm Gartner.

Washington - A Russian wanted in the hacking of the Nasdaq stock market and of payment systems resulting in $300 million in losses has been extradited to face US criminal charges, officials said Tuesday.

Powerful Cyber Spy Tool Linked to US-led Effort A powerful cyberspying tool can tap into millions of computers worldwide through secretly installed malware, security researchers say, with many signs pointing to a US-led effort.

Just like clouds can hide sunshine, they can also hide user activity from the security controls deployed by the business in the world of IT.

Some versions of the stock email app in Android are plagued by a vulnerability that can be exploited to cause the application to crash, a researcher revealed on Friday.According to Hector Marco, a Spain-based security researcher, an attacker can remotely launch a denial-of-service (DoS) attack against a user by sending them a specially crafted email.

Kaspersky Lab security expert Dmitry Bestuzhev presents research on “Desert Falcons” at the Kaspersky Lab Security Analyst Summit on Feb. 17.

The Vawtrak banking malware now leverages macros and the Windows PowerShell scripting tool to infect computers, Trend Micro reported on Monday.