SecurityWeek

Security weaknesses on many popular fitness trackers may allow hackers to access or potentially manipulate user data, a study showed Monday.

A serious vulnerability in the Mac OS X firewall Little Snitch could have been exploited by hackers to gain root privileges on a system or execute arbitrary code in the context of the kernel.

SFG, the Furtim-related piece of malware that was said last week to be specifically targeting “at least one European energy company,” might have no special interest in the energy sector after all, but is instead more focused on evasion and on stealing passwords and money.

CryptXXX, one of the most prevalent ransomware variants out there, is now leveraging spam emails for distribution, researchers at Proofpoint warn.

The Pokémon GO hype isn’t over, and more cybercriminals are taking advantage of it. After a malware-riddled Pokémon GO app emerged over a week ago, researchers have also found a fake lockscreen app in Google Play under the name of Pokemon Go Ultimate.

A researcher has demonstrated how malicious hackers could have stolen significant amounts of money from Google, Microsoft and Facebook by leveraging flaws in how these companies implemented their phone-based verification services.

Canonical informed users on Friday that the Ubuntu Forums website was breached after a hacker exploited a known vulnerability in one of the add-ons installed on the vBulletin-powered site.

Bay Dynamics, a maker of cyber risk analytics software, has completed a $23 million Series B financing round led by Carrick Capital Partners.The company’s flagship “Risk Fabric” platform was designed to detect and remediate insider threats and automate the process of analyzing security information to measure cyber risk.

Nearly one million Android users have fallen victims to eight fake applications that falsely claimed to help them gain more followers on social networks, but instead stole their information and money.

SWIFT Engages BAE Systems and Fox-IT to Bolster Threat Intelligence Sharing

The Onion Router, better known as Tor, is the most popular anonymity network out there, but MIT researchers claim to have created an even better system, called Riffle.

In my previous SecurityWeek article, we looked at what type of cyber threat intelligence analyst makes sense for your business. Analyst expertise can span a wide range of business, technical and security-related areas and the outputs that analysts provide can vary greatly based on business need.

After Android malware that intercepts incoming calls to bypass two-factor authentication systems emerged earlier this year, Symantec researchers have now discovered a Trojan that prevents users from making outgoing calls to banks from their smartphones.

Blocking C&C Connections Won't Stop Locky RansomwareLocky, one of the most used ransomware families during the first half of the year, is now able to encrypt files without connecting to a command and control (C&C) server, Avira researchers warn.

Two-thirds of European consumers want to use biometrics to make payments easier and more secure. This is the finding of new research commissioned by Visa Inc and undertaken by Populas during late April and early May 2016.