SecurityWeek

Legal services company Epiq has taken its systems offline globally after being hit by a piece of ransomware.Epiq said on Monday that it detected the malware on its systems on February 29. The company said it had found no evidence that any data was exfiltrated or misused.

In my previous column, I talked about the rapidly changing geopolitical landscape and the escalation of cyberattacks on critical infrastructure. Some of you may be wondering: “Why should I care? Russia and other nation-states aren’t focused on me and my networks.”

Tuesday’s presidential primaries across 14 states mark the first major security test since the 2018 midterm elections, with state and local election officials saying they are prepared to deal with everything from equipment problems to false information about the coronavirus.

Threat actors linked to China increasingly targeted the telecommunications sector in 2019, according to endpoint security firm CrowdStrike.CrowdStrike on Tuesday published its 2020 Global Threat Report, which provides data on both state-sponsored and financially-motivated operations observed by the company last year.

Foreign actors continue to attempt to interfere with the election process, multiple United States departments and agencies warned in a joint statement released ahead of Tuesday’s presidential primaries.

A software engineer on trial in the largest leak of classified information in CIA history was “prepared to do anything” to betray the agency, federal prosecutors said Monday as a defense attorney argued the man had been scapegoated for a breach that exposed secret cyberweapons and spying techniques.

The U.S. Department of Justice announced on Monday that two Chinese nationals have been charged with laundering over $100 million worth of cryptocurrency stolen by North Korean hackers from a cryptocurrency exchange.

If DevOps represents the union of people, process, and technology to continually provide value to customers, then DevSecOps represents the fusion of value and security provided to those same customers.

Patches released over the past several days for multiple WordPress plugins address vulnerabilities that have been actively exploited as part of the same website takeover campaign

Although businesses are increasingly at risk for cyberattacks on their mobile devices, many aren’t taking steps to protect smartphones and tablets.

Cybersecurity firm Checkpoint has created an encyclopedia of the various techniques used by malware to evade analysis.

Rail contractor RailWorks Corporation is notifying employees and third-parties that it recently fell victim to a ransomware attack in which sensitive information might have been compromised.

Software security updates NVIDIA released on Friday address multiple denial-of-service (DoS) vulnerabilities in GPU display drivers and Virtual GPU Manager software.

Pharmacy store chain Walgreens has started informing some users of its mobile application that their personal and health-related information may have been seen by other customers.

US regulators moved to impose fines Friday against the nation's four major wireless carriers for selling location data of customers without their consent.The Federal Communications Commission proposed fining T-Mobile more than $91 million; AT&T some $57 million; Verizon $48 million, and Sprint $12 million.

US lawmakers have passed legislation offering $1 billion to help telecom carriers "rip and replace" equipment from Chinese tech firms Huawei and ZTE amid national security concerns.

A serious vulnerability affecting Apache Tomcat can be exploited to read files from a server and in some cases even to achieve remote code execution.

Microsoft this week announced new features in its Edge browser to prevent the download of potentially unwanted applications (PUA).

ProtonMail on Thursday introduced a new feature designed to make it more difficult for hackers and spammers to impersonate users who have custom domain email addresses.The new feature, DKIM key management, is currently in beta and users have been encouraged to share feedback to help ProtonMail developers improve it.

A British judge on Thursday paused Julian Assange's extradition hearing following four days of intense legal wrangling over Washington's request for the WikiLeaks founder to stand trial there on espionage charges.