SecurityWeek

Caribou Coffee informed customers this week that more than 260 of its stores in the United States were hit by a data breach that resulted in the exposure of payment card information.

Phishing attacks have become more targeted and sophisticated and also show a focus on enterprises, cloud-based Internet security services provider Cyren says.

The United States, United Kingdom, Canada, Australia and New Zealand officially blamed China on Thursday for the cyberattacks launched by a threat group known as APT10 against organizations around the world.

A vulnerability in Cisco Adaptive Security Appliance (ASA) Software could allow an attacker to retrieve files or replace software images on a device. 

The U.S. Defense Department and bug bounty platform HackerOne on Thursday announced the results of Hack the Air Force 3.0.

The US Justice Department on Thursday indicted two Chinese hackers tied to Beijing's security services who allegedly targeted companies and agencies in a dozen countries, which US officials said showed President Xi Jinping had not fulfilled his pledge to stop cybercrime.

Researchers continue to analyze the recent Shamoon 3 attacks and they have discovered more links to Iran and additional components of the malware.

The U.S. Treasury Department on Wednesday announced sanctions against nearly two dozen Russia-related individuals and entities over their roles in election interference, hacking the World Anti-Doping Agency (WADA), and other malicious activities.

An out-of-band update released by Microsoft on Wednesday for its Internet Explorer web browser patches a zero-day vulnerability exploited by malicious actors in targeted attacks.

A malicious email campaign targeting employees of banks and financial services companies in the United States and the United Kingdom has been abusing Google Cloud Storage for payload delivery, Menlo Labs security researchers say.

The Russian-linked cyber-espionage group Sofacy has developed a new version of their Zebrocy tool using the Go programming language, Palo Alto Networks security researchers warn.

One in four (27%) employees of healthcare organizations in North America admit to being aware of a ransomware attack targeting their employer over the past year, a new Kaspersky Lab survey reveals.

The U.S. Department of Defense lacks visibility into software inventories, a review of Marine Corps, Navy, and Air Force commands and divisions reveals.

ATHENS, Greece (AP) — Greece's supreme court has accepted a French extradition request for a Russian bitcoin fraud suspect, whom the same court has, confusingly, already agreed to extradite to the U.S. and Russia.

Hackers could remotely brick servers by launching firmware attacks that involve the Baseboard Management Controller (BMC), researchers at firmware security company Eclypsium have demonstrated.

The Cybersecurity Industry Doesn't Have Artificial Intelligence Right Yet, But it is Promising Technology

Hackers apparently connected to China accessed thousands of sensitive EU diplomatic cables, the New York Times reported Wednesday, in the latest embarrassing data breach to hit a major international organization.

Several well-known banking Trojans that have been around for several years have shared loaders, Trend Micro security researchers have discovered. 

Social security numbers and other personal information belonging to employees of the U.S. National Aeronautics and Space Administration (NASA) may have been stolen after at least one of the agency’s servers was breached.

Huawei defended its global ambitions and network security on Tuesday in the face of Western fears that the Chinese telecom giant could serve as a Trojan horse for Beijing's security apparatus.