SecurityWeek

If the FBI discovers that foreign hackers have infiltrated the networks of your county election office, you may not find out about it until after voting is over. And your governor and other state officials may be kept in the dark, too.

The global and interconnected nature of business today means that no company or organization is an island. Every modern business relies on many others, either as part of the supply or distribution chain, or for value-added services like accounting and social media marketing. 

Westchester, Illinois-based ingredients giant Ingredion Incorporated revealed this week that it recently detected suspicious activity on some data center servers.Only a few details have been provided about the incident, but it appears that a piece of malware infected some of the company’s systems.

The official campaign website of U.S. President Donald Trump exposed information that may have allowed hackers to intercept emails and send out emails on behalf of the Trump campaign, according to security experts.

Threat intelligence company Flashpoint this week announced that it received a total of $34 million in investment and debt financing.Of the total amount, $6 million represents new equity from investors and $28 million is debt financing from Bank of Montreal’s Technology and Innovation Banking Group.

Chinese state-sponsored hackers conducted cyber-espionage operations targeting various aerospace-related firms for years in an effort to help the county’s advancements in this sector, Crowdstrike reports.

Massachusetts Gov. Charlie Baker has announced a new program to help municipalities bolster their cybersecurity.The Republican governor addressed the third annual Massachusetts Cybersecurity Forum Thursday at the Statehouse. Baker and the Massachusetts Technology Collaborative convened the event to bring about 200 cybersecurity experts together.

A security researcher has published a proof-of-concept (PoC) exploit for the recently addressed Android zero-day vulnerability that impacts Pixel 2 devices.

Three years after Thoma Bravo acquired a majority holding in DigiCert, the Utah-based digital certificate firm has announced its acquisition by Clearlake Capital Group and TA Associates. TA already had a minority holding in the firm and has been investing in DigiCert for seven years.

Global shipping and ecommerce giant Pitney Bowes revealed on Thursday that the recent service disruptions were caused by a piece of ransomware known as Ryuk.

A northwestern Indiana hospital system is warning more than 68,000 patients that their personal information, including Social Security numbers and health records, may have been exposed during a data breach.

The head of Russia's security service said Thursday it is now reviving cooperation with US agencies over cybersecurity despite major tensions between the two countries.

October is National Cybersecurity Awareness Month (NCSAM) and an opportune time to remind every organization of the importance of “awareness” to their cybersecurity programs. 

Instagram announced this week that users will have more control over the data they share with third-party applications and websites.

TA505, the Russian-speaking threat actor known for operating the Dridex Trojan and Locky ransomware, has been using a new remote access Trojan (RAT) in recent attacks, Proofpoint reports.

The city of Baltimore is set to purchase $20 million in cyber insurance coverage, five months after an attack hobbled its computer network.The city’s Board of Estimates on Wednesday approved the purchase of two $10 million policies. The premiums will total $835,000.

Russia-linked threat actor APT29 has been successfully avoiding detection for the past three years while compromising multiple government targets, ESET’s security researchers report.

Cisco on Wednesday informed customers that some of its Aironet access points (APs) are affected by a critical vulnerability that can be exploited by a remote attacker to gain unauthorized access to devices.

Chinese telecom company Huawei on Tuesday criticized the Estonian government and media for spreading what it says are “arbitrary and unfounded” allegations about cybersecurity risks related to the company’s mobile phones.

Germany released draft security guidelines on Tuesday for next generation wireless networks that stopped short of banning Huawei, as the U.S. warned again it would reconsider intelligence sharing with allies that use the Chinese company’s equipment.