SecurityWeek

Operators behind the Cerber ransomware are currently running 161 active campaigns, which generate an estimated $2.3 million in annual revenue, according to a new report from Check Point and IntSights.

Researchers have found yet another method for bypassing the User Account Control (UAC) security feature in Windows by leveraging a legitimate tool.

Early in the 20th century, the pioneers of psychology, Sigmund Freud and Pierre Janet introduced the revolutionary concept of an “unconscious” or “subconscious” mind. The idea was that we have a “mind-within-the-mind,” an underlying consciousness keeping track of all the things just under the surface of our consciousness that we didn’t have room for, or didn’t want to acknowledge, during our waking day.

A recently disclosed Linux kernel vulnerability caused by a TCP feature affects nearly 80 percent of Android devices, according to mobile security firm Lookout.

The University of California San Diego (UCSD) has developed a technique that it claims will be able to detect hardware trojans that might be introduced to a chip design during its progress along the manufacturing supply chain. The complexity of modern chips, some containing in excess of 1 billion transistors, combined with the globalization of the manufacturing process makes this a very real threat.

Shark, a newly observed type of ransomware, is available for free on underground forums, but its authors demand a 20% cut of the profits, security researchers say.

UK business software firm Sage has issued a statement indicating that it has suffered an 'unauthorized access', potentially compromising the records of close to 300 customers.

A vulnerability affecting programmable logic controllers from Rockwell Automation can be exploited by attackers to gain control of affected devices. While the security hole is not easy to address, the vendor has provided some mitigation advice.

Facebook has announced the winner of its 2016 Internet Defense Prize. This year, the $100,000 reward went to a team of researchers whose work has focused on post-quantum security for TLS.

A new Locky ransomware variant sold by Brazilian malware developers has been delivered to targeted organizations using Windows script (WSF) files, Trend Micro warned on Sunday.

HEI Hotels & Resorts informed customers on Sunday that 20 of the hotels it operates in the United States are affected by a security breach involving payment card information.

The cybercrime gang that breached the systems of Oracle-owned point-of-sale vendor MICROS has reportedly also targeted several other similar companies.

The latest version of the Shade ransomware is no longer limited to only encrypting user’s files, but it also installs remote access tools on the infected computers, Kaspersky Lab researchers warn.

Researchers have identified yet another attack method that can be used to silently exfiltrate data from air-gapped computers. The latest technique involves the noise emitted by hard disk drives and it’s relatively efficient over short distances.

A cyber-espionage campaign operating for more than eight months has been linked to an Indian Advanced Persistent Threat (APT) group known as Patchwork, which might be the same attackers behind Operation Hangover, Forcepoint researchers warn.