SecurityWeek

What appears to be the source code of hacking tools used by an Iranian cyber-espionage group has been posted online along with information apparently stolen from victims. 

Recently, the infamous Triton (also known as Trisis) malware framework made news again after researchers from FireEye found evidence of the same attacker lurking in other critical infrastructure.

British cybersecurity researcher Marcus Hutchins, known for his actions that helped stop the WannaCry ransomware attack, admitted in a U.S. court to aiding in the development and distribution of a banking Trojan.

Google on Thursday announced that it will soon block login attempts from embedded browser frameworks in an effort to prevent man-in-the-middle (MitM) phishing attacks.

Facebook has admitted to uploading the email contacts of up to 1.5 million users over a period of three years without gaining either the user or the contacts' prior consent.

Macedonian national Djevair Ametovski was sentenced this week to 90 months in prison by United States authorities for operating an international cybercrime marketplace named Codeshop.

With growing concern over DNS manipulation attacks, details on a new elite state-sponsored DNS hijacking campaign have been released. Called operation Sea Turtle, researchers believe that at least 40 different organizations across 13 countries have been compromised.

There are No Shortcuts or Easy Fixes for Retaining Top Security Talent, but Respect is KeyIn the words of the famous song “Respect”, written by Otis Redding and popularized by Aretha Franklin:

A financially motivated threat actor believed to speak Russian has used remote access Trojans (RATs) in attacks on financial entities in the United States and worldwide, Israel-based security firm CyberInt reports.

Updates released on Wednesday for Drupal 7 and 8 patch several vulnerabilities affecting third-party Symfony and jQuery components used by the Drupal core.

A team of researchers has demonstrated an interesting type of denial-of-service (DoS) attack on programmable logic controllers (PLCs), where network flooding can lead to the disruption of the physical process controlled by the device.

Cisco on Wednesday released patches for 30 vulnerabilities, including a critical bug impacting ASR 9000 Series Aggregation Services Routers running IOS XR 64-bit software.

An undercover operative targeted several cybersecurity experts in an apparent effort to gather intelligence about critics of Kaspersky.

Bad bots are a continuing problem. Good bots, those that perform welcome and benign activities -- such as search engine crawlers like Googlebot and Bingbot -- are welcome. Bad bots, those that scrape and steal content, mine for competitive data, undertake credential stuffing, ad fraud, transaction fraud and more, are not.

Sunnyvale, CA-based Fortinet agreed a deal worth $545,000 to settle a whistleblower lawsuit brought by the U.S. government and Yuxin 'Jay' Fang. The lawsuit alleged that Fortinet had supplied mislabeled goods manufactured by countries including China, falsely representing the goods were in compliance with the U.S Trade Agreements Act (TAA).

Brazil does not have a highly organized hacker underground in the same way as Russia and eastern Europe. Most of the malicious activity by Brazilian actors is within Brazil against Brazilians. The primary reasons are geography and language, and very strict money moving laws. But this does not mean that Brazil lacks hacking capabilities, nor that the rest of the world can ignore Brazilian hackers.

Iran-linked cyber-espionage group OilRig is making broad use of DNS tunneling across its tools portfolio, Palo Alto Networks security researchers reveal.

The European Commission has no evidence of issues associated with using Kaspersky Lab’s products, a document published this week reveals.

Oracle this week announced the release of 297 new security fixes as part of its April 2019 Critical Patch Update (CPU), two-thirds of which are remotely exploitable without authentication.