SecurityWeek

Authorities in Pensacola, Florida said Monday the city had been hit by a cyberattack, just days after a Saudi officer killed three American sailors at the city's naval base.

A security researcher has analyzed three hardware-based password vaults and discovered that credentials are stored in plaintext and survive hardware resets. 

Virtual private network (VPN) services provider NordVPN on Monday announced the launch of a public bug bounty program on the HackerOne platform.The company says it will pay between $100 and $5,000 per vulnerability, but the payouts can be even higher “for especially clever or severe” weaknesses.

Geopolitics is likely to underpin cybersecurity threats throughout 2020. International politics have always centered on nations seeking to surpass their rival nations, both economically and militarily. The rivals involved haven't changed in decades; but the primary battleground has moved to the internet.

Google on Monday announced that it has released the source code of a tool designed to help developers identify vulnerabilities related to file access.

US regulators concluded Friday that British consultancy Cambridge Analytica -- at the center of a massive scandal on hijacking of Facebook data -- deceived users of the social network about how it collected and handled their personal information.

The Dridex Trojan continues to pose a significant threat to user data and its operators are expected to continue using it in attacks targeting the financial services sector, the Department of Homeland Security warns.

Data Behavior Analytics (DaBA) provider Cyberhaven last week revealed it secured $13 million in Series A funding amid the launch of its DaBA solution.

Two Romanian nationals have been sentenced to prison in the United States for their roles in a multi-million dollar online fraud operation.

BMW and Hyundai have been targeted by a cyber-espionage group believed by many to be associated with the government of Vietnam, German broadcaster Bayerischer Rundfunk (BR) reported last week.

The Homeland Security Department is backing away from requiring that U.S. citizens submit to facial-recognition technology when they leave or enter the country.

The Russian state-sponsored hacking group known as Gamaredon has been targeting various Ukrainian diplomats, government and military officials, and law enforcement since mid-October 2019, threat intelligence company Anomali reports.

Two local privilege escalation vulnerabilities have been identified by a researcher in an enterprise VPN product from cloud-native networking solutions provider Aviatrix.Aviatrix claims to have over 400 customers worldwide, including companies such as Netflix, United Airlines, Docker, Epsilon, and some major hotel chains.

Facebook on Thursday filed suit in California against one organization and two individuals for engaging in ad fraud on the social media platform.

Automated third-party security lifecycle management provider Panorays this week announced it raised $15 million as part of a Series A funding round.

Germany-based industrial connectivity solutions provider Weidmueller has released firmware updates for many of its managed industrial Ethernet switches to address critical vulnerabilities.

Authorities in the United States recently stopped the activities of more than 600 domestic money mules, the Department of Justice announced on Wednesday.

VMware on Thursday informed customers that it has released patches for a critical remote code execution vulnerability in ESXi that was disclosed recently at the Tianfu Cup hacking competition in China.

A new piece of macOS malware linked to the North Korean hacking group Lazarus employs in-memory execution of payloads, researchers revealed this week.

A vulnerability that can be exploited to determine if a user is connected to a VPN and hijack active TCP connections in a VPN tunnel has been found to affect various Linux and Unix operating systems.