SecurityWeek

Google this week announced plans to turn off access to G Suite account data for less secure apps (LSAs), as they represent a potential security risk for users.

Several critical vulnerabilities found by Cisco Talos researchers in programmable logic controllers (PLCs) made by WAGO can be exploited remotely for arbitrary code execution and denial-of-service (DoS) attacks.

$10 Million GDPR Fine Imposed on German Telco 1&1

JavaScript package manager npm last week addressed a vulnerability that could allow a publisher to access files on a user’s system.The issue impacts versions of npm prior to 6.13.3 and versions of yarn prior to 1.21.1, and it could be exploited through a specially crafted entry in the package.json bin field. npm v6.13.4 addresses the vulnerability.

The Massachusetts Department of Revenue needs to do more to protect the security of taxpayer and business data, the state auditor said Monday.

Sophisticated cybercrime groups have targeted North American gas stations with point-of-sale (PoS) malware, Visa warns.

Three Louisiana parish sheriff's offices were targeted by hackers over the weekend in a suspected cyberattack, officials confirmed.

Researchers working for F-Secure have identified a dozen vulnerabilities in popular Barco ClickShare wireless presentation systems. While the vendor has patched the most serious vulnerabilities, the remaining issues are not easy to fix.

Facebook on Friday alerted employees that hard drives rich with information about those on the social network's payroll were stolen from a car last month.

As small and medium-sized businesses (SMBs) increasingly recognize that a reactive security posture is no longer sufficient for protecting their networks, managed security service providers (MSSPs) that cater to SMBs face both an immense opportunity and a considerable challenge.

Study Aims to Show Links Between U.S. Voting Infrastructure and Nations With a Proven Aptitude and Desire to Target Elections

GitLab has paid more than half a million dollars in rewards to security researchers who contributed to its public bug bounty program over the past year.The DevOps platform launched its first bug bounty initiative on HackerOne in 2014, but kept the program private.

Schneider Electric last week informed customers that patches have been made available for vulnerabilities in some Modicon controllers and several EcoStruxure products.

Officials announced Saturday that no data was held for ransom and that a recovery operation is getting underway after a cyberattack a day earlier triggered a shutdown of city government computers in New Orleans.

Iran's telecommunications minister announced on Sunday that the country has defused a second cyberattack in less than a week, this time “aimed at spying on government intelligence."

New Jersey’s largest hospital system said Friday that a ransomware attack last week disrupted its computer network and that it paid a ransom to stop it.

Ransomware was detected after a suspected cyberattack prompted a shutdown of city government computers in New Orleans on Friday, officials said.

A suspected cyberattack prompted a shutdown of city government computers in New Orleans on Friday.

Microsoft this week announced the preview availability of Microsoft Threat Protection, a unified pre and post breach enterprise defense suite that aims to natively integrate across products.