SecurityWeek

Business is Now the Primary Target for Ransomware, and Nation-States are Among the Attackers

Roughly one-third of the ICS-specific vulnerability advisories published in 2018 contained basic factual errors, including when describing and rating the severity of a flaw, according to the 2018 Year in Review report published on Thursday by industrial cybersecurity firm Dragos.

Malta's largest bank was the target of a cyber attack Wednesday, with hackers attempting to withdraw 13 million euros ($14.7 million), Prime Minister Joseph Muscat said.

An unofficial patch has been made available for a recently disclosed remote code execution vulnerability affecting the Apache OpenOffice open source productivity suite.

A Windows application was recently observed packing the ability to run on Macs and download and install malware on the target systems.

Beijing called the latest US warning against using Huawei equipment "groundless" on Tuesday, as the Chinese telecom giant faces espionage fears in a growing number of countries.

U.S. senators recently introduced and reintroduced bills whose goal is to help the government address the shortage of cybersecurity experts.Senators Amy Klobuchar (D-MN) and John Thune (R-SD) on Monday introduced the bipartisan Cyber Security Exchange Act, which establishes a public-private exchange program.

SAP this week released its February 2019 set of security fixes, to address over a dozen vulnerabilities across its product portfolio, including a Hot News flaw in SAP HANA Extended Application Services, advanced model.

Researchers have detected a new, stealthy Astaroth trojan campaign emanating from and centered in Brazil, but spreading to parts of Europe. Named after 'the Great Duke of Hell' because of its use of satanic variable names, Astaroth has been around since late 2017.

Two computer hackers were charged with sending false shooting and bomb threats to hundreds of schools and other institutions in the U.S. and Britain, federal prosecutors said Tuesday.The men are members of Apophis Squad, a worldwide collective of hackers intent on using the internet to “sow chaos,” the Department of Justice said in Los Angeles.

UK-based Identity Data Intelligence specialist GBG has agreed to acquire the Atlanta-based identity verification and fraud prevention services provider IDology for $300 million in cash.Based in Chester, GBG helps customers validate and verify the identity and location of their users.

A team of researchers has demonstrated that Intel’s SGX technology can be abused to hide an advanced and stealthy piece of malware that could allow attackers to steal data and conduct activities on the victim’s behalf. Intel says its technology works as intended and it’s not designed to block these types of attacks.

Microsoft’s Patch Tuesday updates for February 2019 address more than 70 vulnerabilities, including an Internet Explorer flaw that Google researchers have spotted being exploited in attacks.

Email provider VFEmail was hit by a destructive attack, where a hacker who accessed its network was able to erase its servers in the United States, including the backup systems. 

Symantec announced on Tuesday that it has acquired Luminate Security, an Israel-based company that specializes in securing access to corporate applications in hybrid cloud environments. 

Application security firm ShiftLeft on Tuesday announced that it raised $20 million in a Series B funding round, which brings the total raised by the company to nearly $30 million.The funding round was led by Thomvest Ventures, with participation from new investor SineWave Ventures and existing investors Bain Capital Ventures and Mayfield.

Adobe on Tuesday released patches for Acrobat and Reader, Flash Player, ColdFusion and Creative Cloud. One of the Reader flaws is a critical data leakage issue whose details were made public by a researcher in January.

Chinese Companies Are facing Many of the Same Cyber Challenges as Companies Elsewhere in the World

One day before Adobe’s monthly security updates, a third-party fix has been released for an Adobe Reader vulnerability revealed several weeks ago.

Lawmakers on Tuesday backed a bill that could cut off Russia's internet traffic from foreign servers, a move critics say is a step towards censorship and possibly an isolated network like in North Korea.