SecurityWeek

Google is stepping up its effort to improve the security and privacy of Android with a new initiative called ASPIRE (Android Security and PrIvacy REsearch). 

Google this week released a set of security patches for Android, to address over 50 vulnerabilities in the mobile operating system.

Apple this week released several security updates to address tens of vulnerabilities impacting the iOS and macOS platforms, the Safari browser, and various Windows applications. 

It has been six months since General Data Protection Regulation (GDPR) went into effect and interest in data privacy has never been higher. The trend will continue, and organizations must realize that the lens through which they view data privacy has a major impact on their business.

Australia Thursday passed controversial laws allowing spies and police to snoop on the encrypted communications of suspected terrorists and criminals, as experts warned the "unprecedented powers" had far-reaching implications for global cybersecurity.

Siemens wants to release security advisories on the second Tuesday of every month, similar to Microsoft, Adobe and SAP.

GCHQ Joins the NSA in Publishing its Vulnerabilities Equities Process

Facebook chief Mark Zuckerberg pushed back Wednesday against emails showing the social media giant offering Netflix and other popular apps preferential access to people's data even after it had tightened its privacy rules.

Attorneys General from 12 U.S. states this week filed a lawsuit against a healthcare tech solutions provider over a data breach suffered by the company in 2015.

ATLANTA (AP) — Two Iranian men already indicted in New Jersey in connection with a broad cybercrime and extortion scheme targeting government agencies, cities and businesses now face new federal charges in Georgia related to a ransomware attack that

Ukraine has once again accused Russian intelligence services of launching cyberattacks against one of its government organizations.

LONDON (AP) — A U.K. Parliament committee accused Facebook on Wednesday of cutting special deals with some advertisers to give them more access to data as it released 250 pages worth of documents on the tech giant's internal discussions about the value of users' personal information.

Security updates released by Adobe on Wednesday for Flash Player patch two vulnerabilities, including a critical flaw exploited by a sophisticated threat actor in attacks aimed at a healthcare organization associated with the Russian presidential administration. The attack may be related to the recent Kerch Strait incident involving Russia and Ukraine.

Adam Kujawa, Director of Malwarebytes Labs, has been contemplating the evolution of malware attack and defense, attempting to work out strategies to stay ahead of cybercriminals in what has always been a technological game of leapfrog.

The Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI) this week issued an alert on activity related to SamSam, one of the most prevalent ransomware families at the moment. 

Symantec on Wednesday unveiled a new product designed to protect critical infrastructure organizations, including industrial and Internet of Things (IoT) environments, against USB-borne threats.

Thousands of emails were stolen from aides to the National Republican Congressional Committee during the 2018 midterm campaign, a major breach exposing vulnerabilities that have kept cybersecurity experts on edge since the 2016 presidential race.

A recently discovered malware dropper has the ability to use nearly a dozen decoy document file formats to drop various payloads, Palo Alto Networks security researchers warn. 

Not Enough Evidence That Russians Are Behind Recent Spear-Phishing Attack, Microsoft Says

Some machine-to-machine (M2M) protocols can be abused by malicious actors in attacks aimed at Internet of Things (IoT) and industrial Internet of Things (IIoT) systems, according to research conducted by Trend Micro and the Polytechnic University of Milan.