SecurityWeek

Fear of Government Surveillance Overreach is Driving the Adoption of Secure Collaboration Platforms

Facebook on Thursday said that its Messenger app will be watching behind the scenes for scammers using the smartphone communication system.

The source code of the GhostDNS exploit kit (EK) has been obtained and analyzed by researchers. GhostDNS is used to compromise a wide range of routers to facilitate phishing -- perhaps more accurately, pharming -- for banking credentials. Target routers are mostly, but not solely, located in Latin America.

Hackers claim to have obtained more than 200 GB of archived data from Australian transportation and logistics giant Toll, and they have already started leaking it after the company refused to pay a ransom.

Zoom announced this week that on May 22 it will publish a detailed draft of the cryptographic design it plans on using for its upcoming end-to-end encryption feature.

Many Israeli websites were hit by a coordinated cyber attack Thursday, with the home pages replaced by images of the country's commercial capital Tel Aviv in flames.Israel's National Cyber Directorate said private companies using a particular operating system were targeted, but said the damage was "superficial".

Subscription meal kit service Home Chef has confirmed that it recently suffered a data breach impacting customer information.

For as much buzz as there is in recent times around the impending death of brick-and-mortar retail, the move to online shopping is not new. The first transactions occurred in the 1960s with IBM mainframe applications, which sped up processes such as airline ticket reservations and sales. However, these were custom applications. Online shopping as we know it today emerged much later with the development of the internet.

Information archiving firm Smarsh has acquired cybersecurity and compliance firm Entreda. The acquisition adds Entreda's 300 clients from the enterprise wealth management market to Smarsh's 6,000 financial services clients, while bringing new cybersecurity expertise to the secure collection, storage and management of enterprise data.

The latest Drupal updates patch cross-site scripting (XSS) and open redirect vulnerabilities, but they have only been assigned “moderately critical” severity ratings.

Cyber insurance and security provider Coalition this week announced that it has raised $90 million in equity capital.

At this week’s Build virtual event, Microsoft announced new Identity and Azure features meant to improve security for both application developers and enterprise customers.

Google this week released Chrome 83 to the stable channel with patches for a total of 38 vulnerabilities, with improved Safe Browsing protection, and updated privacy and security controls.

Under the Current Economic Conditions, Security Professionals Must Quickly Re-assess Their Approach to Defending Against Insider Threats. 

Researchers have trawled the dark web to see how the underground is responding to the COVID-19 pandemic. The callous criminal effect has been obvious in the rise of corona-themed scams, phishing and malware -- but individuals, shops and supplies in the underground are just as affected as their legal counterparts.

Client-side web security provider Source Defense this week announced raising $10.5 million in a Series A+ funding round.Founded in 2014, the company provides a website security solution aimed at delivering real-time protection against attacks originating at website supply-chain vendors.

Three vulnerabilities identified in QNAP Photo Station last year could be chained to achieve pre-authentication remote code execution on affected QNAP network-attached storage (NAS) devices.

Japan is investigating a possible leak of data including details of a prototype missile in a massive cyberattack earlier this year on Mitsubishi Electric Corp., officials said Wednesday.

VMware informed customers on Tuesday that it has patched a high-severity remote code execution vulnerability in its Cloud Director product.