SecurityWeek

A group of researchers has devised a new proof-of-concept attack that targets the touchscreen of Near-Field Communication (NFC)-enabled mobile devices such as smartphones and allows remote control of the devices. 

Luxembourg-based laboratory testing services giant Eurofins Scientific on Monday revealed that some of its IT systems have been infected with a piece of ransomware.

Several vulnerabilities have been found and patched in the Kace K1000 systems management appliance from Quest.

Hackers can use synthetic clicks to bypass many of the privacy and security features implemented last year by Apple in its macOS operating system, a researcher has revealed.

Unpatched vulnerabilities found in the rkt container runtime can be exploited by an attacker to escape the container and gain root access to the host. 

Google this week announced a new policy that aims at eliminating the use of deceptive installation tactics among Chrome browser extensions. 

Security researchers from ESET have analyzed several PowerShell scripts used by the Russia-linked Turla threat group in recent attacks. 

Microsoft has reminded users to patch the Windows vulnerability tracked as BlueKeep and CVE-2019-0708 due to the high risk of exploitation.

2.3 billion files are currently exposed and accessible through misconfigured network-attached storage (NAS) devices, FTP and rsync servers, and Amazon S3 buckets to anyone on the internet. That's 750 million more than 12 months ago, and despite Amazon's largely successful attempts to limit the exposure of its S3 buckets.

Ireland's supreme court on Friday dismissed a bid by Facebook to block a landmark data security case from progressing to the European Court of Justice.

Fort Lee, New Jersey-based cloud data protection company OwnBackup on Thursday announced that it raised $23.25 million in a Series C funding round.

Amazon on Wednesday added the ability to tell its Alexa digital assistant to forget what it has heard in a move that could assuage concerns about Echo devices remembering conversations.The command "Alexa, delete everything I said today" will get the virtual aide to do just that, the internet colossus said in an online post.

Bypassing macOS’ Gatekeeper by leveraging trust in network shares is a trivial operation, a security researcher has discovered. 

A recently uncovered piece of sophisticated malware targeting Linux provides attackers with remote control of the infected systems, Intezer’s security researchers have discovered. 

Researchers from Positive Technologies have discovered several vulnerabilities in APROL industrial process control systems from Austria-based B&R Industrial Automation.According to the cybersecurity firm, the flaws impact 12 components of the APROL products, which are often used by oil and gas, energy, and mechanical engineering companies.

Checkers Drive-In Restaurants, Inc. on Wednesday informed customers that malware had been found on point-of-sale (PoS) systems at some of its Checkers and Rally's restaurants.

Industrial Internet of Things (IIoT) is an essential part of business transformation and the Industry 4.0 revolution. Its use is burgeoning, with more than 7 billion devices in use worldwide. This is expected to grow to more 20 billion by 2025 -- and does not include phones, tablets or laptops. It is a journey just beginning, and nobody yet knows the destination or route.

Marking the one-year anniversary of GDPR coming into force (May 25, 2018), a web-scanning service has analyzed the visible GDPR compliance of the 100 most popular websites in each of the 28 European member states. The scan is non-intrusive. As a result, it cannot say that an organization is compliant (non-compliance can occur deep in the system), but it can say if an organization is not compliant simply by examining the parts that are visible over the internet.

Attackers With the Backing and Sophistication of Nation-States Are Increasingly Targeting Commercial Entities

Apple this week released updates for iTunes and iCloud for Windows applications, to address recently disclosed SQLite and WebKit security flaws in them. iTunes for Windows 12.9.5 was released with patches for a total of 25 vulnerabilities. Of these, four impact SQLite, while the remaining 21 were addressed in WebKit.