SecurityWeek

Vulnerabilities in the PrinterLogic Print Management software could allow an attacker to execute code remotely on endpoints, Sygnia Consulting security researchers have discovered. 

The GE Communicator software is affected by several vulnerabilities, including the presence of hardcoded credentials and privilege escalation flaws, ICS-CERT revealed last week.

A Ukrainian national was indicted in the United States for his role in a years-long, international scheme to infect computers with malware via online advertisements, or malvertising. 

Remember when we used to believe we could prevent every attack? We focused on prevention, layering defenses so that if one layer failed another would be there to stop the attack. As the years passed, we realized that despite a defense-in-depth strategy, 100% prevention wasn’t possible. 

Experts called on 5G providers Friday to heed supply chain security in light of concerns about technology providers such as China's Huawei, recently banned by the US government.

Israel claims it has bombed a building housing Hamas cyber operatives in response to a cyberattack launched by Gaza’s ruling militant group over the weekend.The Israel Defense Forces (IDF) said on Twitter on Sunday that it had thwarted a Hamas “cyber offensive” aimed at Israeli targets.

Google is getting ready to host its fourth-annual Capture the Flag (CTF) event, which will feature over $30,000 in prize money.Set to take place in June, the event welcomes teams of security researchers from around the world interested in putting their skills to the test in solving security challenges. 

The shift to the cloud is well underway. The RightScale 2019 State of the Cloud Report finds that 84 percent of respondents have a multicloud strategy, with public cloud adoption at 91 percent.

Magecart is a prolific stealer of bank card details. It is neither a malware type nor an attacker group -- it is more like a skimming attack style. Around a dozen different bad actors have already been discovered using Magecart -- and now there is a new one reported Friday: Mirrorthief.

European and American investigators have broken up one of the world’s largest online criminal marketplaces for drugs, hacking tools and financial-theft wares in raids in the United States, Germany and Brazil.

Cybercriminals have been wiping GitHub, GitLab and Bitbucket repositories and asking their owners to pay a ransom to recover the data. The impacted Git service providers believe the attackers have used compromised credentials to access accounts.

While candidates were focused on campaigning in 2016, Russians were carrying out a devastating cyber operation that changed the landscape of American politics, with aftershocks continuing well into Donald Trump’s presidency.And it all started with the click of a tempting email and a typed-in password.

Mozilla this week announced plans to update its Add-on Policy for Firefox, to ban extensions that contain obfuscated code.The change, which will enter into effect on June 10, 2019, is expected to allow the Internet organization to respond faster to reports of malicious extensions. 

CrowdStrike announced this week that its Falcon endpoint security platform now includes new capabilities for detecting firmware attacks and auditing security-related settings in the BIOS.

Android users are frequently advised to limit app downloads to those from their corporate app store, or from Google's official Google Play store. Despite this, users are often tempted to visit the more dangerous third-party stores offering exotic apps or apps with copyright protection removed.

The UK government has published a consultation document on the proposed regulation of consumer IoT devices. The consultation is not designed to see whether regulation is necessary, but to help the government "make a decision on which measures to take forward into legislation."

A researcher has discovered vulnerabilities in more than 100 plugins designed for the Jenkins open source software development automation server and many of them have yet to be patched.

Playing defense is always more difficult than being on the attack, because defense is always reactive on some level. This concept is especially true in cybersecurity, where adversaries can take as many shots as they want at an organization, while the poor security team has to be perfect every time to prevent a successful attack. 

German police have shut down one of the world's largest illegal online markets in the so-called darkweb and arrested the three men allegedly running it, prosecutors said Friday.The operation involved Europol, Dutch police and the FBI and also led to the arrests of two major suppliers of illegal narcotics in the United States, they said.