SecurityWeek

The infamous Locky ransomware has once again switched to a new extension to append to encrypted files, but reverted to malicious Office documents for distribution, security researchers have discovered.

Google this week released the December 2016 set of monthly patches for the Android platform which resolved a total of 74 vulnerabilities, 11 which were rated Critical severity.

(InfosecIsland) - Given the unforeseen results of the 2016 US Presidential election, it is hard to predict the future, particularly in sorting out campaign promises from policy intent.

News broke last week of a ransomware attack targeting the San Francisco Municipal Transport Authority (SFMTA, or 'Muni'), and security researchers have now taken a closer look at the malware used.

The Presidential Commission on Enhancing National Cybersecurity last week published a set of recommendations aimed at strengthening cybersecurity across the public and private sectors.

Trying to Focus on Everything at Once is the Same as Focusing on Nothing at All...

Approximately 100,000 UK TalkTalk and Post Office ISP users were affected by the recent Mirai attack that severely affected nearly a million Deutsche Telekom customers in Germany in late November. It was assumed that the UK victims were the outer ripples of the primary attack; and this was confirmed by a subsequent report that quoted the Mirai developer as apologizing for the effect on the Post Office.

The 2017 Global Cybersecurity Assurance Report Card shows a six point fall from last year's rating -- down from 76% to 70% (marked as C-). Although organizations' confidence in mitigating threats is constant at 79% (C+), confidence in the ability to assess risks has tumbled 12 points from 73% to 61% (D-).

The most common vulnerabilities used by exploit kits in the past year affect Flash Player, Windows, Internet Explorer and Silverlight, according to a report published on Tuesday by threat intelligence firm Recorded Future.

EU and US consumer watchdogs announced Tuesday they are filing complaints against a clutch of smart toys that can "spy" on children and their homes, for allegedly breaching privacy and data protection laws.

Optiv Security, the cyber security company formed as a result of the merger of Accuvant and FishNet Security, today announced that private equity giant Kohlberg Kravis Roberts & Co. (KKR) will acquire a majority stake in the security firm.

I’m often asked why I run a team entirely dedicated to researching, developing and implementing various program frameworks – when so many security organizations get by just fine without them. However, the phrase “get by just fine without them” is part of the answer. The challenge with helping security leaders and professionals understand why what they’re doing requires a model to follow when there are few visible consequences to simply winging it.

Russian President Vladimir Putin on Tuesday signed off on a broad-ranging plan aimed at bolstering the country's defenses against cyberattacks from abroad and cracking down on perceived foreign influence.

Sony has released firmware updates for many of its security cameras to address a critical vulnerability that can be exploited to take control of the devices, including by botnets such as Mirai.

Nintendo announced on Monday the launch of a new bug bounty program for its 3DS handheld gaming systems. The company is prepared to offer between $100 and $20,000 for vulnerabilities found in the product.