SecurityWeek

Facebook said it expects a fine of up to $5 billion from the Federal Trade Commission, which is investigating whether the social network violated its users’ privacy.The company set aside $3 billion in its quarterly earnings report Wednesday as a contingency against the possible penalty but noted that the “matter remains unresolved.”

A top White House official told Kirstjen Nielsen, then Homeland Security secretary, not to bring up election security with President Donald Trump, steering her away from discussing a critical national security threat with a president who bristles at suggestions that Russian interference contributed to his 2016 victory, according to two people familiar with the matter.

Data protection provider Digital Guardian today announced it raised $30 million in a financing round that will help it accelerate product development and innovation.The Waltham, Massachusetts-based company offers a data loss prevention platform that works across the corporate network, traditional endpoints, and cloud applications.

Recently observed attacks targeting officials within government finance authorities and representatives in several embassies in Europe abuse the legitimate TeamViewer application to gain full control of victim machines.

The 2018 Internet Crime Report (ICR) shows that both the incidence and cost of internet crime continues to escalate. Complaints rose 14.3% from 2017 to 351,937 in 2018. Associated losses increased by 90.8% from $1,418.7 million to $2,706.4 million over the same period.

The threat actor behind the DNSpionage campaign has switched to new malware in attacks observed earlier this month, Cisco’s Talos security researchers reveal.

Researchers have uncovered serious denial-of-service (DoS) and improper access control vulnerabilities in X-ray devices made by Japanese imaging giant Fujifilm.

Google this week released Chrome 74 to the stable channel with patches for 39 vulnerabilities, as well as with several other tweaks inside.Of the 39 security fixes included in the new browser iteration, 19 were for vulnerabilities reported by external researchers. These include 5 High severity flaws, 12 Medium risk bugs, and 2 Low severity issues.

A serious vulnerability affecting some of Rockwell Automation’s MicroLogix and CompactLogix programmable logic controllers (PLCs) can be exploited by a remote attacker to redirect users to malicious websites.

British Prime Minister Theresa May has reportedly approved a limited role for China's Huawei to help build a 5G network in the UK, shrugging off security warnings from senior ministers and Washington surrounding the telecoms giant, media said Wednesday.

1992 was both an ending and a beginning. It was the year I lost my beloved grandfather, and I’ll never forget his final words to me: “Stop shaking the ladder, you idiot!” Shortly after his completely unpredictable and unpreventable demise, the Short Message Service (SMS) was born. Yes, that’s right, SMS was born in 1992, and the first SMS message was “Merry Christmas.” 

Every year, thousands of companies are breached and billions of data records exfiltrated by cyber adversaries, leading in extreme cases to business closures, geopolitical setbacks, or citizens’ loss of confidence in the integrity of their countries’ electoral procedures.

The sophisticated supply-chain attack called Operation ShadowHammer that targeted ASUS users can be linked to the "ShadowPad" threat actor and the CCleaner incident, Kaspersky Lab’s security researchers say. 

Brazilian hackers have developed a drive-by download attack leveraging the inherent trust in the Google name. A banking trojan known as LoadPCBanker is deployed using the file cabinets template in Google sites as a delivery vehicle.

This move to container-based development and agile methodologies has been great for innovation and iteration, but it’s also brought a massive shift in the application landscape with real impact on security teams. 

Bodybuilding.com, a popular website for fitness and bodybuilding enthusiasts, announced last week that hackers were able to access its systems. 

A recent survey from the UK's National Cyber Security Centre (NCSC, part of GCHQ), conducted by Ipsos Mori, suggests that 52% consider their most prevalent online security consideration to be protecting their privacy, while 51% consider it to be the loss of their money.

The source code of a backdoor associated with the prolific FIN7 threat actor has emerged on VirusTotal alongside builders and other tools from the group, FireEye security researchers reveal. 

OceanLotus, a Vietnam-linked cyber-espionage group, has been using atypical executable formats in an attempt to avoid detection and hinder analysis, according security firm Malwarebytes. 

Dallas, Texas-based firm EmCare Inc disclosed on Saturday that a number of employees' email accounts had been accessed, potentially exposing personal information of almost 60,000 people, including 31,000 patients.