SecurityWeek

Attackers using the Adwind remote access Trojan (RAT) are targeting petroleum firms in the United States in a recent campaign, researchers from Netskope report.

A hospital system that serves a large part of rural west Alabama temporarily quit accepting new patients after a ransomware attack crippled some of its computer systems Tuesday.

Customer support company Zendesk revealed on Wednesday that it has become aware of a security incident impacting thousands of accounts activated before November 2016.

The US government plans to collect the DNA of all migrants detained after entering the country illegally, officials said Wednesday.

An ongoing cybercrime campaign that started as early as December 2018, has avoided widespread detection through a combination of stealth tactics and hiding in plain sight.

Google on Wednesday announced that its Password Checkup tool has been added to the Account password manager, and the company has unveiled some new security and privacy features for YouTube, Maps and Assistant.

US Secretary of State Mike Pompeo warned Italy Wednesday of China's "predatory approach" to trade and investment, but Rome insisted its special powers over 5G supply deals would protect it.

There are many topics in security that generate quite a bit of discussion when someone brings them up.  Unfortunately, metrics isn’t one of those topics.  Sadly, more often than not, bringing up the topic of metrics is a great way to create awkward silence in a room.

IoT security firm Armis has confirmed that the recently disclosed vulnerabilities tracked as Urgent/11 affect several real time operating systems (RTOS) other than VxWorks.

SecurityWeek has announced that it will offer an Advanced ICS/SCADA Hacking Training program at its 2019 Industrial Control Systems (ICS) Cyber Security Conference, which takes place October 21-24 in Atlanta.

Focusing on Data Security Controls Will Not Provide the Most Robust Protection Against Data Breaches

Hundreds of US municipalities, schools and health organizations have been hit by ransomware in 2019, leading to massive service disruptions, researchers said Tuesday.

Singapore’s Cyber Security Agency (CSA) on Tuesday unveiled the country’s Operational Technology (OT) Cybersecurity Masterplan, whose goal is to help enhance the security and resilience of organizations that house OT systems.

Iranian Foreign Minister Mohammad Javad Zarif is denying his country would interfere with the upcoming U.S. presidential election and says his government doesn’t have a preference in the race.

The New Zealand arm of Japanese sports brand Asics has apologised after pornography was broadcast on large television screens above its central Auckland store for several hours, startling Sunday morning shoppers.

The Marsh/Microsoft 2019 Global Risk Perception Survey is a follow-on to a similar survey published in February 2018 (conducted in 2017). SecurityWeek criticized the earlier survey results for not including a specific cybersecurity function among the respondents.

Medical Practice Closing Doors Permanently After Ransomware Destroys Patient Records and Backups

Malicious actors may be able to easily access unprotected Cisco WebEx and Zoom meetings due to an API enumeration vulnerability, Cequence Security’s CQ Prime threat research team revealed on Tuesday.

A former Yahoo software engineer has admitted in court to hacking into the accounts of thousands of the platform’s users.The man, Reyes Daniel Ruiz, 34, of Tracy, California, pleaded guilty to accessing about 6,000 Yahoo accounts, in search of private and personal records, mainly sexual images and videos. 

A recently disclosed vBulletin vulnerability, which had a zero-day status for roughly two days last week, was exploited in a hacker attack targeting the forums of cybersecurity solutions provider Comodo.