SecurityWeek

Iran-linked threat actor COBALT DICKENS has launched a new phishing campaign targeting universities around the world, similar to an operation launched in August 2018, Secureworks reveals.

Funding Will Help Company Expand DevOps and Workload Security Offerings for Cloud, Container, and Hybrid Environments

Hackers linked to North Korea have been targeting entities in the United States using evasion techniques that involve an uncommon file format, U.S.-based business compromise intelligence startup Prevailion reported on Wednesday.

The Automated Incident Response feature in Office 365 Advanced Threat Protection (ATP) is now generally available, Microsoft has announced.

Trustwave security researchers have discovered five new credential leaking vulnerabilities, two in a D-Link DSL modem and three in multiple Comba Telecom WiFi devices.

A Chinese woman who stirred fears of espionage when she entered President Donald Trump's Mar-a-Lago resort carrying multiple mobile phones and a malware-spiked thumb drive was found guilty of trespassing and lying in a Florida court Wednesday.

In an attempt to improve the privacy and security of its users, Google is getting ready to bring DNS-over-HTTPS (DoH) to the Chrome browser.

The FBI has published upgraded figures from the Internet Crime Complaint Center (IC3) describing business email compromise (BEC) as a $26 billion scam. The figure is aggregated from 166,349 domestic and international victim complaints received by IC3 between June 2016 and July 2019 comprising a total loss of $26,201,775,589.

The Telegram secure messaging application was found to breach users’ privacy by failing to properly remove images from a device’s local storage when the sender selects to delete them for all recipients.

Google this week released Chrome 77 in the stable channel with various fixes and improvements, including 52 security patches.

Four of the Security Notes published by SAP as part of the September 2019 Security Patch Day are rated Hot News, the same as last month.

Americans commemorated 9/11 with solemn ceremonies and vows Wednesday to “never forget” 18 years after the deadliest terror attack on American soil.

Siemens on Tuesday released several security advisories, including ones covering recently disclosed vulnerabilities tracked as DejaBlue, Urgent/11 and SACK Panic.

Researchers have discovered yet another side-channel attack method that can be exploited to steal potentially sensitive data from devices powered by Intel processors.

Nigerian and US authorities said Tuesday that nearly 300 people had been arrested in a months-long global crackdown on online scams to hijack wire transfers from companies and individuals.

A Connecticut school district's teachers are working without computer access less than a week after a second malware attack targeted the district's servers.The Republican American reports the district shut any computers connected to the Wolcott school district networks Sept. 4 after a staff member reported suspicious activity on a district computer.

A recent survey has shown that software defined wide area network (SD-WAN) is the most disruptive of the current crop of disruptive technologies. An August 2019 survey found that SD-WAN disruption is affecting companies of all sizes, although at a greater rate among smaller companies with a revenue size of less than $10 million.

Microsoft’s Patch Tuesday updates for September 2019 fix 80 vulnerabilities, including two Windows flaws that have been exploited in attacks. [UPDATE BELOW]

ESET security researchers have discovered a new backdoor associated with the United Arab Emirates (UAE)-linked Stealth Falcon threat actor. 

Adobe’s September 2019 Patch Tuesday updates fix two code execution vulnerabilities in Flash Player and a DLL hijacking flaw in Application Manager.