SecurityWeek

Twitter will not be allowed to disclose more information on national security requests after the U.S. government convinced a judge that the disclosure of such information could harm national security.

Professional services company Cognizant has fallen victim to a cyber-attack which appears to have been the work of the Maze ransomware operators.

A threat actor that has been spotted targeting Azerbaijan has shown an interest in the energy sector, specifically SCADA systems related to wind turbines, Cisco’s Talos threat intelligence and research group reports.

Multiple botnets are targeting a zero-day vulnerability in fiber routers in an attempt to ensnare them and leverage their power for malicious purposes, security researchers warn.

Over the past week, Google has observed more than 18 million malware and phishing emails related to COVID-19 being sent out every day.Additionally, the Internet giant is seeing over 240 million COVID-19-related daily spam messages. On a daily basis, Gmail blocks 100 million phishing emails.

A Connected TV (CTV) ad fraud operation managed to generate as much as 28% of the CTV traffic observed in January 2020 by White Ops, a company that specializes in bot fraud protection.

GitHub has released technical information on six vulnerabilities identified by one of its security researchers in the WebAudio component of Chrome.

GitHub has warned users that they may be targeted in a fairly sophisticated phishing campaign that the company has dubbed “Sawfish.”

Banking Trojans Increasingly Target Corporate UsersFinancial phishing has increased in frequency and accounted for more than half of all phishing detections last year, Kaspersky says.

Cisco this week released security patches to address numerous vulnerabilities across its products, including critical severity flaws that impact IP Phones and UCS Director.

Videoconferencing platform Zoom is rolling out a number of measures meant to stem criticism over how it has handled security as users flock to the application during the coronavirus pandemic.

Cloud and data center security solutions provider Guardicore on Wednesday made available technical information on a critical VMware vCenter Server vulnerability that can be exploited by an attacker to gain full control over the targeted VMware deployment.

India has banned the use of video-conferencing app Zoom for government remote meetings, the government said Thursday, in the latest warning about the platform's security.

'Double extortion' is the term given to an evolving ransomware tactic: first steal confidential data, then encrypt the victim's files. If the victim doesn't pay the ransom, expose the data.

Zoom Teams Up With Luta Security to Revamp Bug Bounty ProgramZoom announced on Wednesday that it has teamed up with Katie Moussouris’ company, Luta Security, to revamp its bug bounty program.

The Pentagon’s latest bug bounty challenge, Hack the Air Force 4.0, has resulted in the discovery of over 400 vulnerabilities and rewards totaling more than $290,000.

Syrian-linked hackers recently switched to COVID-19-themed lures as part of a long-running surveillance campaign, Lookout security researchers reveal.

Swiss-based global shipping giant Mediterranean Shipping Company (MSC) has confirmed that a recent outage was caused by a malware attack that affected its headquarters in Geneva.

Linksys has prompted users to reset passwords after learning that hackers were leveraging stolen credentials to change router settings and direct customers to malware.