SecurityWeek

Global shipping and ecommerce giant Pitney Bowes revealed on Thursday that the recent service disruptions were caused by a piece of ransomware known as Ryuk.

A northwestern Indiana hospital system is warning more than 68,000 patients that their personal information, including Social Security numbers and health records, may have been exposed during a data breach.

The head of Russia's security service said Thursday it is now reviving cooperation with US agencies over cybersecurity despite major tensions between the two countries.

October is National Cybersecurity Awareness Month (NCSAM) and an opportune time to remind every organization of the importance of “awareness” to their cybersecurity programs. 

Instagram announced this week that users will have more control over the data they share with third-party applications and websites.

TA505, the Russian-speaking threat actor known for operating the Dridex Trojan and Locky ransomware, has been using a new remote access Trojan (RAT) in recent attacks, Proofpoint reports.

The city of Baltimore is set to purchase $20 million in cyber insurance coverage, five months after an attack hobbled its computer network.The city’s Board of Estimates on Wednesday approved the purchase of two $10 million policies. The premiums will total $835,000.

Russia-linked threat actor APT29 has been successfully avoiding detection for the past three years while compromising multiple government targets, ESET’s security researchers report.

Cisco on Wednesday informed customers that some of its Aironet access points (APs) are affected by a critical vulnerability that can be exploited by a remote attacker to gain unauthorized access to devices.

Chinese telecom company Huawei on Tuesday criticized the Estonian government and media for spreading what it says are “arbitrary and unfounded” allegations about cybersecurity risks related to the company’s mobile phones.

Germany released draft security guidelines on Tuesday for next generation wireless networks that stopped short of banning Huawei, as the U.S. warned again it would reconsider intelligence sharing with allies that use the Chinese company’s equipment.

Palo Alto Networks’ security researchers have identified what appears to be the first crypto-jacking worm that spreads using Docker containers.

Oracle this week announced the release of its last Critical Patch Update of 2019, which includes a total of 219 new security fixes across various product families.

Chinese tech giant Huawei said on Wednesday that its revenue for the first nine months of the year grew by almost a quarter despite a US campaign to isolate the company globally.Huawei's revenues jumped 24.4 percent on-year to 610.8 billion yuan ($86.2 billion) and its profit margin increased 8.7 percent, it announced.

WordPress 5.2.4, which WordPress developers released this week, patches six vulnerabilities, including cross-site scripting (XSS), unauthorized access, server-side request forgery (SSRF), and cache poisoning issues.

Facebook this week announced an expansion to its bug bounty program for third-party apps, as well as a series of bonuses for bugs in native products.The social platform has been running a bug bounty program for third-party apps and websites since last year, but only included vulnerabilities involving improper exposure of Facebook user data.

An intrusion prevention signature update pushed out this week by Symantec for its Endpoint Protection product has caused many devices to crash and display a so-called blue screen of death (BSOD).

Threat intelligence company Digital Shadows has uncovered over 550 fake domains attempting to mimic websites related to the 2020 presidential election in the United States.The company’s researchers identified typosquatted domains targeting Democratic and Republican candidates, along with funding sites of the Republican Party.

Safari does use Tencent to ensure that users in China do not navigate to malicious websites, but it never sends the actual URL of a visited site to the Chinese company, Apple says.

Updates released by Adobe on Tuesday for its Acrobat and Reader, Experience Manager, and Download Manager products patch 82 vulnerabilities.It’s worth noting that this month Adobe did not release any updates on Patch Tuesday, as the company usually does.