SecurityWeek

China-linked cyber-espionage group APT10 has targeted companies in the United States and Europe to steal intellectual property or gain commercial advantage, Recorded Future security researchers say.

A researcher has disclosed the existence of a zero-day vulnerability in macOS Mojave that can be exploited by malware to steal plaintext passwords from the operating system’s Keychain. The flaw has not been reported to Apple, but its details have not been made public.

Presented by

There’s no doubt your information is out there. And at a certain point, you have to assume it’ll be exposed. 

A group of scammers has been abusing a Gmail feature that gives users control over all dotted versions of their Gmail addresses.

Pending Privacy Bills Will Have Critics and Face Lobbying From Vested Interests

The check-in links sent to customers by several major airlines from around the world can allow hackers to obtain passengers’ personal information and possibly make changes to their booking, mobile security firm Wandera warned on Wednesday.

California-based web application security firm Signal Sciences on Tuesday announced that it raised $35 million in a Series C funding round, which brings the total raised by the company to more than $61 million.

A malware attack using a newly discovered backdoor has been targeting the mailing list of the organization officially representing the Tibetan government-in-exile.

US officials are fanning out across Europe to warn about the security risks of allowing Chinese telecoms giant Huawei to help build 5G mobile networks, a US diplomat said Tuesday.

More than two dozen vulnerabilities have been discovered by security experts in popular implementations of the remote desktop protocol (RDP), including flaws that allow a malicious RDP server to hack a device running the client RDP software.

Foreign meddling and hacking attempts had "no material impact" on the US midterm congressional elections last year, according to a high-level review by the Justice and Homeland Security Departments Tuesday.

The European Commission (EC) has ordered the recall of a children's smart watch: the ENOX Safe-Kid-One, manufactured in Germany. It had received a complaint from Iceland's consumer protection regulator.

Microsoft has updated its Authenticator application to provide users with security notifications whenever suspicious activity is detected on their accounts. 

The Problems With Passwords and MFA on Safer Internet Day

A researcher has identified a serious remote code execution vulnerability affecting the LibreOffice and Apache OpenOffice open-source productivity suites, but a patch has only been released for the former.

Huddle House, an Atlanta-based restaurant chain with over 300 locations across the United States, informed customers recently that their payment card information may have been compromised as a result of a security breach.

A new backdoor is targeting Linux servers in East Asia and Latin America, including Amazon Web Services (AWS) hosted machines, Check Point security researchers say.

Recorded Future says that its security researchers were able to identify the hacker who first distributed the recently surfaced database of 773 million email addresses. 

The recent takedown of the xDedic marketplace—where threat actors had been buying and selling access to compromised remote desktop protocol (RDP) servers since at least 2016 and that, according to authorities, had facilitated over $68 million USD in fraud—is the latest reminder that fraudulent card-not-present (CN