SecurityWeek

Cisco on Wednesday informed customers that several vulnerabilities, including a code execution flaw classified as “high severity,” have been found in the company’s Industrial Network Director product.

Hackers use steganographic technique to hide communications with command and control servers.

Critical vulnerabilities have been found in the Ukrainian IPTV video streaming platform Ministra, which uses Infomir-manufactured set top boxes (STBs) to transmit streaming content from the platform to end users' televisions. Infomir sells its products throughout the world, so impacted users are not confined to the Ukraine.

Russia's efforts to sow misinformation on Twitter ahead of the 2016 US election was more extensive and professional than earlier believed, security researchers said Wednesday.

An unofficial patch has been released for a recently disclosed zero-day vulnerability in Windows 10’s Task Scheduler. 

OT Environments Need Security Monitoring that Provides Enhanced Visibility and Traceability Into OT Systems

Norwegian aluminum giant Norsk Hydro lost $35-41 million in the first quarter of 2019 as a result of the ransomware attack and expects additional losses of $23-29 million in the second quarter.

Endpoint security firm SentinelOne announced on Wednesday that it has raised $120 million through a Series D funding round led by Insight Partners.

The U.S. National Security Agency (NSA) on Tuesday urged Windows users and administrators to immediately address the vulnerability tracked as BlueKeep and CVE-2019-0708.

An Inside Look at the Evolution of a West African Cybercriminal Startup Turned BEC Enterprise

One day after medical testing firm Quest Diagnostics revealed that nearly 12 million of its patients had their personal and financial information exposed as a result of a breach at the American Medical Collection Agency (AMCA), LabCorp has come forward to say that the incident has also impacted 7.7 million of its customers.

The alleged source code of another tool used by Iran-linked cyber-espionage group OilRig was recently posted online.

A recently patched vulnerability in the NVIDIA GeForce Experience (GFE) could be exploited for the execution of arbitrary commands on affected systems, Rhino Security Labs reveals.

The Network Level Authentication (NLA) feature of Windows Remote Desktop Services (RDS) can allow a hacker to bypass the lockscreen on remote sessions, and there is no patch from Microsoft, the CERT Coordination Center at Carnegie Mellon University warned on Tuesday.

Russia's leading internet company said Tuesday that it's committed to data privacy as it responded to reports that the national intelligence agency is pressuring it into handing over encryption keys.

Cybersecurity solutions provider Kaspersky on Tuesday announced that the company has a new name, a new logo and a new mission statement.

Cybersecurity solutions firm Imperva announced on Tuesday that it has agreed to acquire Distil Networks, an Arlington, Virginia-based provider of bot detection and mitigation solutions for an undisclosed sum. 

Australian police on Tuesday raided the home of a prominent journalist who reported on a secret government plan to spy on Australian citizens.