SecurityWeek

This may come as a surprise to people who know me, but I’ve recently developed a love for crossword puzzles. Aside from challenging our brains and keeping us sharp, I’ve learned that crosswords can be quite fun. In particular, they are full of puns and jokes that so many of us get a kick out of.

Sophos security researchers have observed a spike in the number of attacks featuring a new ransomware family called MegaCortex.

Freedom Mobile, Canada's fourth largest mobile network operator, through a third-party service provider, exposed the details of many customers, including their payment card data.

WordPress released version 5.2 of the popular content management system (CMS) this week, which includes new security and stability features. Named “Jaco,” the update is already available in the WordPress dashboard, and provides administrators with the ability to fix sites much easier than before, in the event something goes wrong. 

Android May 2019 Patches Fix Critical Remote Code Execution VulnerabilitiesThe May 2019 set of security patches released for the Android operating system address 8 Critical vulnerabilities, including 4 remote code execution flaws. 

A vulnerability disclosed late last year has been exploited by malicious actors to deliver a piece of malware that deploys a Monero cryptocurrency miner and looks for new victims on the internet and the local network.

Shape Security has announced a new product designed to protect small and medium business (SMB) websites from the growing scourge of advanced bot-based credential stuffing.

French telecom giant Orange on Tuesday announced that it signed an agreement to acquire Netherlands-based cybersecurity firm SecureLink.

Binance, one of the world’s largest cryptocurrency exchanges, revealed on Tuesday that hackers managed to steal over 7,000 bitcoins, worth more than $41 million.

Baltimore’s government on Tuesday rushed to shut down most of its computer servers after its network was hit by a ransomware virus. Officials believe it has not touched critical public safety systems.

Verizon 2019 DBIR Shows Financially Motivated Attacks Increasing While Criminals Switch to Easiest Targets

The U.S. National Institute of Standards and Technology (NIST), through its National Cybersecurity Center of Excellence (NCCoE), this week announced that it’s working on a project whose goal is to help the energy sector secure industrial Internet of Things (IIoT) systems.

In an effort to make voting more secure and protect political parties and campaigns from cyberattacks, Microsoft this week added new solutions to its previously announced Defending Democracy Program.

Despite many improvements to security technology, information sharing, ease-of-use, and reduction in cost over time, we have yet to see a meaningful reduction in breaches. Why? The answer may have something to do with how organizations respond to a breach beyond the moment it’s discovered.

Most companies are planning to move to, or adopt, cloud solutions for their privileged access management (PAM) deployments, at least according to a new survey suggesting that only 36% of companies plan to keep their PAM solution on-premise.

The Russia-linked threat group known as Turla has been using a sophisticated backdoor to hijack Microsoft Exchange mail servers, ESET reported on Tuesday.

Exabeam, a San Mateo, California-based provider of a security information and event management (SIEM) solutions, announced on Tuesday that it has closed $75 million in Series E funding.  

Cybersecurity company Proofpoint this week announced that it entered into a definitive agreement to acquire zero trust network access (ZTNA) provider Meta Networks. 

GandCrab, once known as a consumer-targeting ransomware, is increasingly being used in attacks against business organizations

A Chinese threat actor was spotted using a tool attributed to the NSA-linked Equation Group more than one year prior to it being leaked by the mysterious Shadow Brokers, Symantec revealed on Monday.