SecurityWeek

WikiLeaks founder Julian Assange was arrested in London on a US warrant charging him over his alleged role in a massive leak of military and diplomatic documents in 2010, the Justice Department said Thursday.

Notorious North Korean hackers are using a new Trojan in their attacks, the United States Department of Homeland Security (DHS) and Federal Bureau of Investigation (FBI) warned on Wednesday.

Siemens’ Patch Tuesday updates for April 2019 address several serious vulnerabilities, including some denial-of-service (DoS) flaws affecting many of the company’s industrial products.

As Organizations Digitize Their Business, They Need to Know What and Who They Can Trust 

WikiLeaks founder Julian Assange's nearly seven-year stay at Ecuador's embassy in London came to an abrupt end on Thursday when police entered the building and arrested him after Ecuador withdrew his asylum.

A series of vulnerabilities discovered by researchers in the WPA3 protocol can allow an attacker to obtain the password of a Wi-Fi network.

Hardcoded admin credentials found in the MyCar Controls mobile applications could have been exploited to locate and gain physical access to a vehicle.

Silicon Valley-based cloud security firm Bitglass this week announced that it raised $70 million in a Series D funding round, which brings the total raised by the company to date to over $150 million.

Stealer malware steals information. Its primary purpose is neither to spread to other computers nor to obtain stealthy persistence on an infected computer. It can be like a smash-and-grab burglar -- it grabs what it came for, and that's it. It steals browser histories, passwords and cookies, and files that may contain sensitive data.

Kaspersky Lab security researchers have discovered a sophisticated advanced persistent threat (APT) framework that provides a full set of spying capabilities.

An underground invitation-based private marketplace for stolen digital fingerprints offers more than 60,000 stolen bot profiles at the moment, Kaspersky Lab reports.

The Czech Republic’s highest court says a former justice minister violated the rights of an alleged Russian hacker by allowing his extradition to the U.S. before a separate asylum case was finalized.

SAP this week released 6 Security Notes as part of its April 2019 Security Patch Day, including two that address High severity flaws in Crystal Reports and NetWeaver.

An analysis of the reservation systems used by more than 1,500 hotels around the world revealed that over two-thirds expose user information and allow someone to cancel bookings.

Triton Hackers Focus on Maintaining Access to Compromised Systems, FireEye Says

Minnesota Department of Human Services officials say a data breach at the agency may have exposed the personal information of about 11,000 people.

Microsoft has fixed over 70 vulnerabilities with its April 2019 Patch Tuesday updates, including two Windows zero-day flaws that allow an attacker to escalate privileges on a compromised system.

A recently discovered variant of the Mirai malware is targeting more processor architectures than before, which allows it to attack a wider range of Internet of Things (IoT) devices, Palo Alto Networks security researchers reveal.

Adobe’s Patch Tuesday updates for April 2019 address 43 vulnerabilities affecting the company’s Acrobat and Reader, Flash Player, Shockwave Player, Dreamweaver, XD, InDesign, Experience Manager Forms, and Bridge CC products.

On March 29, 2019, Security Without Borders described the discovery of Android spyware it termed Exodus. The story linked the spyware to a company called eSurv with links to Italian government agencies.