SecurityWeek

The U.S. National Security Agency (NSA) is creating a new Cybersecurity Directorate to reinvigorate the cybersecurity element of its work. 

Software giant Citrix on Tuesday announced that it has completed its investigation into the data breach detected earlier this year.

Officials of an Indiana county say they are trying to determine the extent of a malware attack on the county’s computers.Vigo County Commissioner Judith Anderson says commissioners were informed of a “ransomware” attack early Tuesday.

Brazilian federal police arrested four people Tuesday over the hacking of cell phones belonging to Justice Minister Sergio Moro and prosecutors involved in a massive corruption probe.

Hackers have managed to compromise 62 colleges and universities by exploiting a vulnerability in the Ellucian Banner system, the U.S. Department of Education warns.

Apple this week released a new set of patches to address various security flaws across its product portfolio, including 22 bugs impacting WebKit.

A recently detected attack campaign is attempting to ensnare Elasticsearch clusters into a distributed denial of service (DDoS) botnet, Trend Micro reports. The multi-stage attacks leverage scripts to ultimately deliver backdoors to the targeted servers and turn them into DDoS bots. 

Chinese telecom giant Huawei said on Tuesday that more than 600 jobs would be lost at a US unit as a result of "curtailment of business operations" caused by Washington's sanctions on the firm and 68 of its subsidiaries.

U.S. Attorney General Bill Barr said Tuesday that increased encryption of data on phones and computers and encrypted messaging apps are putting American security at risk.

The Internal Revenue Service’s (IRS) information system security controls require further improvements, a new report from the United States Government Accountability Office (GAO) claims.

The China-linked threat actor known as APT15 has been using a previously undocumented backdoor for more than two years, ESET’s security researchers have discovered. 

Researchers at Defiant, the company behind the Wordfence security plugin for WordPress websites, have come across a malvertising campaign that leverages recently disclosed plugin vulnerabilities to inject malicious code into websites.

A security hole affecting the free and open source ProFTPD file transfer protocol (FTP) server can be exploited to copy files to vulnerable servers and possibly execute arbitrary code.

Several vulnerabilities have been discovered in Comodo Antivirus, including one that allows an attacker to escape the sandbox and escalate privileges, and the vendor does not appear to have released any patches.

Chief executives from several US tech companies met with President Donald Trump on Monday and expressed "strong support" for policies restricting the use of products from Chinese telecom giant Huawei.

Many more healthcare companies in the United States published press releases last week to inform customers that they had been impacted by the data breach suffered by the American Medical Collection Agency (AMCA).

The Czech unit of telecoms giant Huawei secretly collected personal data of customers, officials and business partners, Czech public radio reported Monday, fanning concerns about security risks linked to the Chinese group.

Security researchers have discovered eight Chrome and Firefox extensions that leak user data, including personally identifiable information (PII) and corporate information (CI). 

A group of hackers has leaked online information on secret projects allegedly stolen from the servers of Russian Federal Security Service (FSB) contractor Sytech.

A critical remote code execution vulnerability has been found and patched in Palo Alto Networks’ GlobalProtect product.