SecurityWeek

Magecart started as the name given to a single criminal gang operating a software skimming attack targeting payment card data on web sites. The process proved so successful that other gangs began to use the same approach. 

One of the vulnerabilities Google addressed in Android with the December 2019 set of monthly patches is a critical vulnerability that could result in a permanent denial of service.

The Greek philosopher Heraclitus is quoted as having said, “change is the only constant in life.”  While I’m not sure that I agree with this statement completely, it is an interesting one. The quote provoked me to think about how it might apply to the security profession. After some thinking, I do believe that we can learn some interesting security lessons from Heraclitus. Change may not always be on the docket.

A new Python-based remote access Trojan (RAT) has been used in campaigns targeting a wide range of industries, BlackBerry Cylance revealed this week.

Understanding the Threats, Risks, and Vulnerabilities Associated With Cloud Environments is Critical to Securing Data

Federal officials are considering requiring that all travelers — including American citizens — be photographed as they enter or leave the country as part of an identification system using facial-recognition technology.

Researchers at IBM X-Force have come across what appears to be a new piece of malware that has been used in highly targeted attacks aimed at energy and industrial organizations in the Middle East.

A university student in California has filed a class-action lawsuit against video app TikTok, which she accuses of harvesting large amounts of user data and storing it in China."TikTok clandestinely has vacuumed up and transferred to servers in China vast quantities of private and personally-identifiable user data," the court filing said.

Google has shared some data on the adoption of Transport Layer Security (TLS) by Android applications and it seems that significant progress has been made over the past two years.

Cybersecurity Teams Need Actionable Insight Into the Latest Techniques, Tactics and Procedures Being Used by Cyber Adversaries 

Vulnerabilities in document and imaging library Accusoft ImageGear could allow attackers to execute code remotely on vulnerable machines, Cisco Talos has discovered.The library, which is used by developers to build custom imaging applications, contains the entire document imaging lifecycle, and includes support for .NET, Java and C/C++.

RUAG, a Switzerland-based firm that develops and markets civil and military technology applications for use in space, in the air and on land, has announced the sale of its cybersecurity subsidiary, Clearswift, to Minneapolis, Minnesota-ba

The EU will relaunch its deadlocked effort to more closely regulate internet phone and message services such as WhatsApp, Skype and Messenger, a top bloc official said on Tuesday.

Microsoft recently addressed an OAuth 2.0 vulnerability that could allow an attacker to take over Azure accounts.The issue impacts specific Microsoft OAuth 2.0 applications and allows an attacker to create tokens with the victim’s permissions, CyberArk’s security researchers have discovered.

Cisco Talos researchers have identified two vulnerabilities in the GoAhead embedded web server, including a critical flaw that can be exploited for remote code execution.

Twitter this week announced the launch of a privacy center whose goal is to provide increased transparency on how the social platform handles user information.

The website of American gunmaker Smith & Wesson was hacked late last month and the hackers planted malicious code designed to steal customers’ payment card information

The European Commission said Monday it had begun a "preliminary investigation" into how Facebook and Google collect personal data and what they do with it.

Tenable, a cybersecurity firm best known for its vulnerability management solutions, announced on Monday that it has acquired Indegy, a provider of cybersecurity solutions for operational technology (OT) environments, for $78 million in cash.