SecurityWeek

Threat Actors Prefer PowerShell over Other ATT&CK Techniques, Report Shows

An Iran-linked cyberespionage group tracked as Elfin and APT33 continues targeting organizations in Saudi Arabia and the United States, Symantec reported on Wednesday.

ASUS says it has released a fix for the Live Update utility that threat actors abused in Operation ShadowHammer supply chain attack to deliver malware to hundreds of users. 

The European Commission on Tuesday presented its plan to ensure the secure introduction of 5G telecoms networks, with suspicions hanging over Chinese giant Huawei.

A recently observed C++ version of the AZORult data stealer includes the ability to establish a remote desktop connection compromised devices, Kaspersky Lab’s security researchers have discovered. 

Norwegian aluminum giant Norsk Hydro estimates that it may have lost more than $40 million in the first week following the ransomware attack that disrupted its operations.

Apple this week released new security updates for iOS, macOS, tvOS, Safari, and iCloud and iTunes for Windows, addressing tens of vulnerabilities in these products. 

Just as internet security was a relative unknown concern 20 years ago, public awareness of  threats to the electric grid, water supplies, etc. is mounting

Sayata Labs, an Israel-based company that provides risk assessment solutions for the cyber insurance industry, on Tuesday announced that it emerged from stealth mode with $6.5 million in seed funding.

Facebook said Tuesday it shut down more than 2,600 fake accounts linked to Iran, Russia, Macedonia and Kosovo and aiming to influence political sentiment in various parts of the world.

It’s Refreshing to See the Industry Hyping Security Concepts That Actually Work

Facebook last week announced that it introduced new settings designed to make it easier for white hat hackers to test the security of its mobile applications.

At least some variants of the LockerGoga ransomware, a piece of malware involved in several recent high profile attacks, do not encrypt files on a compromised device if a certain type of shortcut file is found in a specific Windows folder, researchers discovered.

Microsoft researchers have identified potentially serious privilege escalation and arbitrary code execution vulnerabilities in a tool from Huawei. The vendor has released updates that should patch the flaws.

Researchers from the Korea Advanced Institute of Science and Technology Constitution (KAIST) say they have discovered 36 previously undisclosed vulnerabilities in the Long Term Evolution (LTE) protocol used by most mobile carriers.

Hijacked Software Update Utility Could Have Impacted Over 1 Million ASUS UsersOver 1 million ASUS users may have been impacted after attackers managed to inject a backdoor in the ASUS Live Update utility, Kaspersky Lab reports. 

Operations at two major US-based chemical companies, Hexion and Momentive, were disrupted recently by a cyberattack reportedly involving LockerGoga, the ransomware that recently hit Norwegian aluminum giant Norsk Hydro.

The Department of Homeland Security (DHS) has issued an alert to warn of critical vulnerabilities impacting numerous Medtronic devices, which are exploitable with low skill level. 

Industrial cybersecurity firm CyberX on Monday announced that it raised another $18 million in a strategic funding round.