SecurityWeek

Cybersecurity firm Checkpoint has created an encyclopedia of the various techniques used by malware to evade analysis.

Rail contractor RailWorks Corporation is notifying employees and third-parties that it recently fell victim to a ransomware attack in which sensitive information might have been compromised.

Software security updates NVIDIA released on Friday address multiple denial-of-service (DoS) vulnerabilities in GPU display drivers and Virtual GPU Manager software.

Pharmacy store chain Walgreens has started informing some users of its mobile application that their personal and health-related information may have been seen by other customers.

US regulators moved to impose fines Friday against the nation's four major wireless carriers for selling location data of customers without their consent.The Federal Communications Commission proposed fining T-Mobile more than $91 million; AT&T some $57 million; Verizon $48 million, and Sprint $12 million.

US lawmakers have passed legislation offering $1 billion to help telecom carriers "rip and replace" equipment from Chinese tech firms Huawei and ZTE amid national security concerns.

A serious vulnerability affecting Apache Tomcat can be exploited to read files from a server and in some cases even to achieve remote code execution.

Microsoft this week announced new features in its Edge browser to prevent the download of potentially unwanted applications (PUA).

ProtonMail on Thursday introduced a new feature designed to make it more difficult for hackers and spammers to impersonate users who have custom domain email addresses.The new feature, DKIM key management, is currently in beta and users have been encouraged to share feedback to help ProtonMail developers improve it.

A British judge on Thursday paused Julian Assange's extradition hearing following four days of intense legal wrangling over Washington's request for the WikiLeaks founder to stand trial there on espionage charges.

Free and open certificate authority Let’s Encrypt on Thursday issued its billionth certificate, four and a half years after issuing the first certificate.

Intel patched over 230 vulnerabilities in its products last year, but less than a dozen impacted its processors, according to the company’s 2019 Product Security Report.

Facebook on Thursday filed a federal lawsuit against oneAudience data intelligence firm over a tactic it used to gather information about users of social media platforms.

Cisco says it will release patches for wireless devices affected by the recently disclosed Wi-Fi chip vulnerability named Kr00k. The company says the flaw impacts some of its routers, firewalls, access points and phones.

A Lincoln health care company has been targeted by cybercriminals, but company officials said there’s no evidence of any patient data being compromised.

Report Examines the Rise of Cybercrime Across Latin America

Cisco on Wednesday released patches for 11 vulnerabilities in its products, including multiple flaws that impact Cisco UCS Manager, FXOS, and NX-OS software.

Hackers have started scanning the Internet for Microsoft Exchange Server instances that are affected by a remote code execution vulnerability patched earlier this month.

Many Vulnerabilities Found in Popular Docker Images, But Most Are Not Loaded Into Memory

A group of researchers has built a sandbox framework that can improve the security of Firefox by isolating third-party libraries used by the browser.