SecurityWeek

In August 2016, the lifeless bodies of a young French man and woman were discovered on a beach in Madagascar, with murder suspected.The secret to the case could be in the last messages they sent, but those are stored in the databanks of US tech giants who don't have to turn over the information to French investigators.

The United States has indicted nine individuals with online identity theft and related charges, the U.S. Department of Justice announced. 

The GAO Makes Recommendations to Improve Security of Taxpayer Information

A bill introduced last week requires all members, officers and employees of the U.S. House of Representatives to undergo annual cybersecurity training.

Only 15% of Malware-Infected Websites Are Blacklisted, Report Finds

Documents associated with the activity of Iranian APT group “Rana” have leaked online recently, exposing the group’s targeting of individuals, as well as information on what appears to be some of the group’s members.

From Vancouver to Volkswagen to Vanderbilt, the most significant threats facing organizations across every sector are now virtual. That’s according to the World Economic Forum’s 2019 Global Risks Report, which named cyber-attack the greatest non-environmental danger to mankind, ahead of even war and terrorism.

Certificate Authority (CA) Sectigo, formerly Comodo CA, has acquired Icon Labs, a provider of cross-platform security solutions for embedded OEMs and Internet of Things (IoT) device manufacturers.

A North Korea-linked threat group tracked as ScarCruft, APT37 and Group123 continues to evolve and expand its toolkit, Kaspersky Lab reported on Monday.

Researchers have discovered a serious remote code execution vulnerability affecting products from Kaspersky Lab. The cybersecurity firm pushed out a patch to customers in early April.

NVIDIA has released patches to address High severity vulnerabilities in its NVIDIA GPU Display Driver that could allow an attacker to escalate privileges or execute code on vulnerable systems. 

A critical vulnerability in Microsoft’s SharePoint collaboration platform has been exploited in the wild to deliver malware.

Facebook is suing South Korean data analytics firm Rankwave to make sure it isn't breaking the leading social network's rules, the US company said Friday.

A researcher has discovered over 100 vulnerabilities in building management and access control systems from four major vendors. An attacker can exploit these flaws to gain full control of impacted products and manipulate the systems connected to them.

The latest Android iteration (Android Q) arrives with TLS 1.3 support enabled by default, as well as with other security improvements, Google announced this week. 

SilverTerrier is not a traditional cybercrime group. It is the collective name Unit 42 of Palo Alto Networks gives to Nigerian cybercriminals. SilverTerrier continues to grow (over 400 individual actors) and evolve (from advance fee and 419 scams to business email compromise (BEC) and malware distribution).

Symantec Appoints Interim CEO as Greg Clark Steps Down

The U.S. Justice Department on Thursday announced charges against members of an “extremely sophisticated hacking group operating in China” in connection with the massive 2015 data breach that impacted health insurer Anthem.

A high-profile hacking collective is offering for sale information allegedly stolen from three top anti-virus companies located in the United States, cybersecurity company Advanced Intelligence reveals. 

The U.S. Department of Homeland Security (DHS) on Thursday published a malware analysis report detailing another piece of malware used by threat actors linked to the North Korean government.