SecurityWeek

ARM Acquires IoT Security Firm Offspark UK-based Semiconductor technology firm ARM Ltd. announced on Monday that PolarSSL, the open source Transport Layer Security (TLS) solution for software and embedded devices, has been rebranded as “ARM mbed TLS”.

Researchers have uncovered a vulnerability in LG’s On-Screen Phone (OSP) application that can be exploited by an attacker to take complete control of affected smartphones.

Researchers at FireEye have been monitoring a campaign in which malicious actors use Secure Shell (SSH) brute force attacks to install a piece of DDoS malware on Linux and other types of systems.

When it comes to securing our organizations from cyberattack, we can be our own worst enemy. For example, how many users on your network store sensitive information like user names and passwords in files with easy to find labels (passwords.doc)? Unfortunately, it’s likely more than you think. And it takes just one of those users falling victim to even a basic spearphishing attack to allow that information to fall into the hands of an attacker.

In response to an increasing number of fraudulent tax returns, financial software developer Intuit temporarily suspended e-filing of state income tax returns made through the company’s TurboTax tax preparation solution.

Tokyo - A cyber security competition began Saturday in Tokyo, with organizers aiming to show off the skills of young Japanese hackers by testing them against international rivals.

The personal information of as many as 80 million people might have been compromised in the recent Anthem data breach.

Tripwire has analyzed the evolution of the security updates released over the past five years by Microsoft. The company determined that while the number of security bulletins has decreased, the number of vulnerabilities fixed with each bulletin has increased.

Cybercriminals have exploited a zero-day flaw in the popular FancyBox for WordPress plugin to inject malicious iframes into many websites. The vulnerability has been patched.

Adobe has released Flash Player security updates that address a total of 18 vulnerabilities, most of which could be exploited for arbitrary code execution.

An overwhelming majority of brokerage and investment advisory firms examined by the U.S. Securities and Exchange Commission (SEC) have been the subject of a cyber-attack.

Microsoft has paid out a total of $125,000 to three HP researchers who found ways to bypass mitigations designed to protect Windows users against attacks leveraging use-after-free (UAF) vulnerabilities.

The threat actors behind the political and economic cyber espionage campaign known as Operation Pawn Storm have started using iOS malware to steal sensitive information from their targets, Trend Micro reported on Wednesday.

In today’s high-risk IT environment, there’s no such thing as too much security, right? Well, that depends. As with anything in life, the devil is in the details. As organizations continue to expand their arsenal of security products in an effort to strengthen protections against advanced threats, they often introduce complexity.

Researchers at Invincea have been monitoring a malvertising campaign in which malicious actors leveraged Adobe Flash Player exploits and file-less infections to deliver ransomware.The campaign, dubbed “Fessleak” based on the email address used to register the domains involved in the attack, appears to be the work of Russian cybercriminals.

Anthem, Inc., one of the largest health care companies in the United States, reported late on Wednesday that its computer systems have been targeted in a “very sophisticated external cyber attack.”

Adobe Systems has made a patch available for a zero-day vulnerability in Flash Player that came under attack in recent days.

New York - A New York jury on Wednesday found Ross Ulbricht guilty of masterminding the online criminal enterprise Silk Road, which could see him jailed for the rest of his life. Ulbricht, 30, amassed a fortune of $18 million from the dark, secretive Silk Road website that conducted more than one million drug deals in nearly three years.

Google recently removed multiple applications from its Google Play store after reports surfaced linking the apps to adware.

A researcher has identified a serious universal cross-site scripting (UXSS) vulnerability in the latest version of Microsoft’s Internet Explorer web browser.