SecurityWeek

A recently observed cyber-espionage toolkit that was used in targeted attacks against the Malaysian government in mid-2018 is made up of publicly available tools and leaked source code of backdoors, ESET says. 

Researchers discovered that some gateways made by Swiss industrial tech company ABB are affected by potentially serious vulnerabilities, but firmware updates will not be made available by the vendor as the impacted products have reached end of life.

Untangle and Malwarebytes Partner to Extend Visibility Across Managed Networks and Endpoints for SMBs

Media giant Oath reported on Tuesday that it has paid out $5 million through its HackerOne-powered bug bounty program in 2018.

Data security solutions provider Egress on Tuesday announced that it has raised $40 million in a Series C funding round led by FTV Capital, with participation from existing investor AlbionVC.

Privilege escalation vulnerabilities in WordPress allow attackers to access features that were intended for administrators only, RIPS Tech security researchers say. 

What Should You do in the Event of a Cybersecurity Incident in an Industrial Environment?

For the last decade, the Anti-Malware Testing Standards Organization (AMTSO) has owned the endpoint security testing standards space. It has done much good, bringing order and consistency to a complex arena.

A Czech cyber-security agency on Monday warned against using the software and hardware of China's Huawei and ZTE companies, saying they posed a threat to state security.

While investigating an information disclosure flaw affecting one of its support forms, Twitter discovered a possible attack coming from IP addresses that may be linked to state-sponsored actors.

The Cyber Readiness Institute (CRI) has launched a Cyber Readiness Program designed to provide practical and meaningful assistance to small and medium businesses who perhaps don't have the resources to give security the priority it needs and deserves. 

New details have emerged about the recent Shamoon 3 attacks, including information on several malware samples, targets in additional sectors, and some links to threat groups believed to be operating out of Iran.

Technical Information of U.S. Ballistic Missile Defense System is Improperly Protected, Audit FindsSecurity controls and processes necessary to protect ballistic missile defense system (BMDS) technical information and the United States Department of Defense (DoD) facilities haven’t been properly implemented, a newly published audit report reveals. 

Twitter recently addressed a security vulnerability that resulted in certain applications not correctly showing all of the permissions they had. 

Cloud security firm Avanan announced on Monday that it has raised $25 million in a Series B funding round, which brings the total raised by the company to date to over $41 million.

The Irish data watchdog on Friday launched an investigation into Facebook, after the social media titan admitted a "bug" may have exposed unposted photos from up to 6.8 million users.

Many applications using the popular SQLite database management system could be exposed to attacks due to a potentially serious vulnerability that can lead to remote code execution, information disclosure, and denial-of-service (DoS) attacks.

Germany's IT watchdog has expressed scepticism about calls for a boycott of Chinese telecoms giant Huawei, saying it has seen no evidence the firm could use its equipment to spy for Beijing, news weekly Spiegel reported Friday.

Los Altos, California-based startup 4iQ, which describes its self as the "identity intelligence company", this week announced that it has secured $18 million in Series B funding, bringing the total raised by the company to date to $32 million.