SecurityWeek

Facebook on Monday announced that it filed a lawsuit in Virginia against 12 domain names for their deceiving behavior.

An online voting system approved in three US states is vulnerable to manipulation by hackers and may not protect ballot secrecy, according to an analysis by security researchers.

A newly disclosed UPnP vulnerability that affects billions of devices can be exploited for various types of malicious activities, including distributed denial-of-service (DDoS) attacks and data exfiltration.

Nearly 1,000 vulnerabilities were found in popular open source projects in 2019, more than double compared to the previous year, according to a report published on Monday by risk management company RiskSense.

A Korean threat actor known as Higaisa has been employing malicious LNK files in recent attacks targeting organizations that use the Zeplin collaboration platform.

Apple has announced the availability of a series of open source tools designed to foster collaboration between password manager developers.

One of the several multinational corporations enlisted by the German government to help it obtain personal protective equipment (PPE) for the care of COVID-19 patients has been targeted in an ongoing phishing campaign, IBM reported on Monday.

The U.S. Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) has warned Windows users that a recently released proof-of-concept (PoC) exploit for the vulnerability tracked as SMBGhost has been abused to launch attacks.

Data discovery, privacy and security provider 1touch.io has secured $14 million in Series A funding, which will help it boost R&D and field presence.

Business process services provider Conduent has been the victim of a ransomware attack that appears to be the work of Maze operators.Formed in 2017 as a divestiture from Xerox and headquartered in New Jersey, the company offers digital platforms for both business and government organizations and has over 68,000 employees in more than 40 countries.

IBM this week announced the availability of open source toolkits that allow for data to be processed while it’s still encrypted.

San Francisco, CA-based attack surface management firm RiskIQ has raised $15 million in a Series D funding round led by National Grid Partners (NGP). NGP is the venture and innovation arm of the British multinational utility company National Grid plc.

The Russian Foreign Ministry on Thursday angrily rejected Germany’s allegations over Russian intelligence involvement in a cyberattack against the German parliament.

Privacy-focused communications application Signal this week announced a new feature meant to enhance user privacy amid social turmoil in the United States: a blur tool.

A critical vulnerability affecting traffic light controllers made by SWARCO could have been exploited by hackers to disrupt a city’s traffic lights.

The North Atlantic Treaty Organization (NATO) this week publicly condemned the malicious cyber-activities directed against COVID-19 responders.

VMware on Thursday announced that it’s acquiring network security company Lastline for its research team and threat detection technology.Terms of the deal, which is expected to close in VMware’s second quarter (Q2 FY2021 ends on July 31), were not disclosed.

Google this week announced expansions to the Advanced Protection Program, with the addition of Google Nest and support for more types of security keys for iOS users.With the Advanced Protection Program, the Internet search giant aims to provide the strongest possible Google Account security for individuals at high risk of targeted attacks.

Campaign staffs for both President Donald Trump and Democratic rival Joe Biden have been targeted recently by foreign hackers, Google researchers said Thursday, highlighting persistent data security concerns ahead of the November US election.

A recently discovered multi-platform Java ransomware uses a Java image file (JIMAGE) to evade detection, BlackBerry security researchers report.Dubbed Tycoon, the ransomware appears to be used only in highly targeted attacks, given the low number of victims and the delivery mechanism employed.