SecurityWeek

Researchers at Kaspersky Lab have come across a new Android Trojan that hacks routers and changes their DNS settings in an effort to redirect traffic to malicious websites.

The number of attacks aimed at industrial control systems (ICS) increased by 110 percent in 2016 compared to the previous year, according to data from IBM Managed Security Services.The company has attributed this significant increase to brute force attacks on supervisory control and data acquisition (SCADA) systems.

Various ZyXEL customized routers are plagued by several vulnerabilities and by default login credentials, SecuriTeam security researchers warn.

The developers of PHPMailer have patched a critical vulnerability that can be exploited by a remote attacker for arbitrary code execution, a researcher said on Sunday.

No, Britney Spears is not dead. Yet her fans' hearts may have skipped a beat today when tweets purportedly from Sony Music Entertainment said "RIP @britneyspears #RIPBritney 1981-2016" and "Britney spears is dead by accident! We will tell you more soon #RIPBritney."

2016 was a big year for cybersecurity news, most of it not terribly encouraging. Still, the year did present the cybersecurity industry with several teachable moments that I believe all security professionals should heed as we move into a new year. Accordingly, I’ve made four New Year’s resolutions for the cybersecurity industry in 2017. If any of these items are not on your “to do” list for 2017, I would challenge you to add them.

Thai authorities have detained at least nine people on suspicion of hacking, a senior junta official said Monday, following days of disruption to government websites sparked by the passing of a controversial cyber censorship law.

Turkey is investigating 10,000 people suspected of terror-related activity on the internet or posting comments on social media insulting government officials, the interior ministry said on Saturday.

Following a successful analysis of the domain generation algorithm used by the Tofsee botnet, the Swiss domain registry (SWITCH) has temporarily suspended around 520 possible .ch domain names -- seriously weakening if not neutralizing the botnet.

This time of the year, spam campaigns are increasingly adopting holiday themes to improve their malware distribution rate and steal users’ banking information or to trick victims into accessing fake online stores, security researchers warn.

A recently detected phishing campaign designed to steal credit card information employed a series of attack tactics previously associated with malware distribution, Proofpoint security researchers reveal.

The Healthcare Industry Has a complex Relationship with Security, Compliance, and Legislation

Open Whisper Systems informed users on Wednesday that the latest Android version of its secure messaging app Signal includes a feature designed to bypass censorship in some countries.

Apple informed iOS developers this week that it has decided to give them more time to ensure that their applications communicate over a secure HTTPS connection.

Severe non-malware attacks and ransomware are the two stand-out malicious behaviors of 2016. When combined, as they have been with the PowerWare extortion, the attack can be both dangerous and difficult to detect.