SecurityWeek

Cybersecurity is the Never-Ending Battle Against Ignorance and Time

A internet interruption resulting from a ransomware attack on a hosting provider has limited functionality of the Arizona state court system’s webpage for most of this week, according to the vendor and court officials.

A group of academic researchers has devised a new eavesdropping attack that leverages the lidar sensors present in commodity robot vacuum cleaners.

Researchers from the Computer Security and Industrial Cryptography (COSIC) group at the KU Leuven university in Belgium have demonstrated that a Tesla Model X can be stolen in minutes by exploiting vulnerabilities in the car’s keyless entry system.

Canadian Prime Minister Justin Trudeau -- under pressure from the opposition to ban Huawei from the country's 5G networks -- refused to say Tuesday when he might make his decision, or if it would come

A subdomain of the official Joe Biden campaign website was defaced last week by what appears to be a Turkish hacktivist.

Cybercriminals targeted Manchester United's IT systems in a "sophisticated" hacking operation, the club said."The club has taken swift action to contain the attack and is currently working with expert advisers to investigate the incident and minimise the ongoing IT disruption," it said in a statement late Friday.

Cybersecurity solutions provider Trend Micro this week announced the release of a free tool designed to help users boost their privacy online and fight misinformation.

Social media giant Facebook this week announced that it has paid out more than $11.7 million in bug bounties since 2011.To date, more than 50,000 researchers signed up for the company’s bug bounty program, and approximately 1,500 of them, from 107 countries, have received a bug bounty reward, the company says.

Authorities in India determined that a major power outage that occurred last month in Mumbai, the country’s largest city, may have been caused by hackers, according to reports.

U.S.

Computer hacker Jeremy Hammond, who is serving a 10-year prison sentence for breaking into computer systems of security firms and law-enforcement agencies, will serve out the remainder of his term in a Chicago halfway house, a U.S. Bureau of Prison spokesman said Wednesday.

Popular messaging application GO SMS Pro is exposing the audio, video, and photo messages of its users, Trustwave’s SpiderLabs security researchers discovered.

VMware on Thursday announced releasing patches for a couple of serious ESXi vulnerabilities that were demonstrated at a recent hacking contest in China.

Facebook this week addressed a vulnerability in Facebook Messenger for Android that could have allowed an attacker to connect to an audio call without user interaction.

Apple confirmed Thursday it would press ahead with mobile software changes that limit tracking for targeted advertising -- a move that has prompted complaints from Facebook and others.

Microsoft this week announced two new features meant to improve the security of priority accounts in Microsoft 365.

VMware on Wednesday patched a total of six vulnerabilities in its SD-WAN Orchestrator product, including flaws that can be chained by an attacker to steer traffic or shut down an enterprise network.

FireEye on Thursday announced a $400 million strategic investment led by investment giant Blackstone, which the company says will be used to support growth initiatives, including the acquisition of Respond Software, also announced on Thursday.

China-linked threat actor APT10 was observed launching a large-scale campaign against Japanese organizations and their subsidiaries.