SecurityWeek

Ransomware authors use various techniques to encourage victims to pay a ransom, and the actors behind a new threat called MIRCOP are employing an unusual one: the ransom note claims that the victim stole 48.48 Bitcoins. 

The U.S. Internal Revenue Service (IRS) announced last week that it has decided to shut down the electronic filing PIN tool on its website after detecting more automated attacks.

A researcher has discovered a vulnerability that could have been exploited to easily delete any video on Facebook. The social media giant released a temporary fix within a couple of hours after learning of its existence.

During a recent investigation of Point of Sale terminals (PoS) in restaurants across the United States, PandaLabs researchers stumbled upon PunkeyPOS, a piece of malware designed to access credit card data.

Germany-based time and frequency synchronization solutions provider Meinberg has released firmware updates for several of its NTP time servers to address three high severity vulnerabilities.

PayPal has addressed a vulnerability that could have been exploited by hackers to insert malicious images into payment pages.

The number of organizations whose customers are targeted by the Android banking Trojan known as “Marcher” has increased considerably over the past period, but PhishLabs researchers said the latest samples they have analyzed don’t target the United States.

I am a very practical guy. While I do appreciate industry thought leadership and can appreciate a new framework in a sea of frameworks once in awhile, I tend to always drift towards what is practical, achievable, productive and sellable to my internal organization. In my former role as a CISO, these characteristics were critical.

Following a couple of weeks of relative silence, the Locky ransomware appears ready to storm unprotected computers once again, with a new infection campaign observed on Tuesday, the same day that the Necurs botnet became active once again.

Microsoft to Solve Document Cloud Compliance and Visibility Issues With Azure Information Protection  

Not all the Twitter accounts have created by humans, and researchers recently caught wind of no less than 3 million such accounts that were all created on the same day two years ago, but which are still active today.

Researchers from Portugal-based security consulting and audit firm Integrity have discovered more than a dozen vulnerabilities in Uber websites and services, including issues that could have been exploited to access driver and passenger information.

Singapore-based mobile ad network InMobi will pay $950,000 after it was charged by the U.S. Federal Trade Commission (FTC) for tracking the location of millions of users without their consent.