SecurityWeek

The United States on Thursday urged "like-minded governments" from the European Union to be cautious and coordinate their policies on 5G network security in light of suspicions over the system proposed by Chinese giant Huawei.

Chinese authorities are using a mobile app designed for mass surveillance to profile, investigate and detain Muslims in Xinjiang by labelling "completely lawful" behaviour as suspicious, a Human Rights Watch report said Thursday.

The biggest cybersecurity challenge in enterprise remains keeping ahead of the “bad guys.” As fast as security gaps are plugged, new vulnerabilities appear and are targeted for the next attack.

Researchers at Tenable have discovered a total of 15 vulnerabilities across eight wireless presentation systems, including flaws that can be exploited to remotely hack devices.

President Vladimir Putin on Wednesday signed into law a "sovereign internet" bill which will allow Russian authorities to isolate the country's internet, a move decried by rights groups.

A botnet targeting the users of the popular Electrum Bitcoin wallet managed to ensnare more than 150,000 hosts at its peak, Malwarebytes security researchers say. 

Software giant Citrix has shared more information about the recent data breach and it appears the hackers had access to the company’s network for roughly five months.

DivvyCloud, a US-based provider of security and compliance automation solutions for public cloud and container infrastructure, on Wednesday announced that it raised $19 million in a growth round, which brings the total raised by the firm to $29 million.

Microsoft this week announced more control and options designed to provide Microsoft 365 customers with the ability to strengthen their data privacy and compliance practices.Following the update, customers get new capabilities as part of Microsoft 365 E5 and E5 Compliance (previously known as Information Protection & Compliance). 

Kaspersky Details MuddyWater’s Post-Infection Tools The MuddyWater cyberespionage group is making use of a broad range of post-infection tools in their attacks, mostly developed in-house, Kaspersky Lab’s security researchers reveal.

A recently observed variant of the Muhstik botnet is exploiting a recently disclosed Oracle WebLogic server vulnerability for cryptomining and distributed denial of service (DDoS) attacks.

Two vulnerabilities discovered by industrial cybersecurity companies CyberX and Nozomi Networks in some of Rockwell Automation’s controllers expose devices to denial-of-service (DoS) attacks

Facebook is launching a major redesign of its app and website built around letting people connect with groups that share their interests — an attempt to shift its focus away from the untrammeled public sharing that has helped spread hate speech, extremism, misinformation and livestreamed video of massacres.

The U.S. Department of Homeland Security (DHS) this week issued a new Binding Operational Directive (BOD) instructing federal agencies and departments to act more quickly when it comes to patching serious vulnerabilities in internet-exposed systems.

Fortune 500 Fiserv Sued by Local Credit Union Over Security Vulnerabilities in Online Banking Platform

A critical Oracle WebLogic Server vulnerability patched last week has been exploited by malicious actors to deliver a new piece of ransomware to organizations.

Russia and China are stepping up "worrying" cyber-spying activity, including last year's plot to hack the world chemical weapons watchdog, the Dutch intelligence service warned Tuesday.

A majority of the 2020 U.S. presidential campaigns are vulnerable to sophisticated email attacks as they have failed to implement DMARC and advanced security systems, according to a study conducted by email security firm Agari.