SecurityWeek

An advanced persistent threat (APT) actor believed to be based in China has been spotted targeting the systems of a European drone maker and a U.S. subsidiary of a French energy management company.

While Google has been releasing monthly Android patches for over a year, the overall impact on device security has been much lower than expected, and actually led to fragmentation, security researchers argue.

Botnet armies have become bigger, more active and more heavily armed than ever before.  In the first quarter of 2016, attacks launched by bots reached a record high of 311 million—a 300 percent increase compared with the same period in 2015 and a 35 percent increase compared with the final quarter of 201

Cybercriminals have been using innocent-looking image files to store and exfiltrate payment card data stolen from compromised ecommerce websites running on the Magento platform.

A zero-day vulnerability in an ecommerce plugin for WordPress has been exploited by cybercriminals to upload backdoors to affected websites, researchers warned.

A retired top US general has been charged with making a false statement during a probe into a classified intelligence leak about a cyberattack against Iran's nuclear program in 2010, prosecutors said Monday.

Unknown sources account for hundreds of thousands of Trojan installations on Android devices, but Google Play and pre-installation are also main sources of malware installation, a recent report from Cheetah Mobile Security Research Lab reveals.

Canadian Foreign Minister Stephane Dion said Monday he is very concerned about possible Russian hacking, following US accusations against the Kremlin.

London - WikiLeaks on Monday claimed Ecuador cut the internet connection of its founder Julian Assange, who is staying at the country's embassy in London, claiming the move was in response to the group's publication of documents related to US presidential hopeful Hillary Clinton.

U.S. lawmakers want the Department of Justice and the Office of the Director of National Intelligence to provide clarifications on the reports about Yahoo being asked to scan its customers’ emails.

The U.S. Intelligence Advanced Research Projects Activity (IARPA) has awarded its $11.4 million Cyber-attack Automated Unconventional Sensor Environment (CAUSE) program to BAE Systems. 

The group calling itself “The Shadow Brokers” has changed tactics and announced the launch of a crowdfunding campaign for the exploits allegedly stolen from the NSA-linked threat actor known as the Equation Group.

Concern over the security of home routers is nothing new, but has soared with the increasing fear that the Internet of Things (IoT) can (and already has) been used to generate huge distributed denial of service (DDoS) attacks. The problem is that many home routers are known to include vulnerabilities, while home users are not known for their ability to behave securely.

Siemens has released software updates to address several vulnerabilities in its SIMATIC and Automation License Manager (ALM) products.

At least one of the individuals involved in the development of the notorious Dyre (Dyreza) banking Trojan has apparently started working on a new piece of malware dubbed “TrickBot.”