SecurityWeek

The third known and second successful attack against banks using the SWIFT money transfer network impacted an Ecuadorian bank between January 12 and January 22, 2015. During this period at least 12 fraudulent transfer requests instructed San Francisco-based Wells Fargo to send $12 million belonging to Ecuador's Banco del Austro (BDA) to accounts in Hong Kong, Dubai and the US. Wells Fargo complied.

Switzerland-based power and automation technologies provider ABB has released a software update for one of its substation automation products to address several vulnerabilities related to the storage of passwords.

Scrum.org informed users on Tuesday that their account information might have been compromised after hackers exploited a new vulnerability in third party software used to operate the website.

More than 19 months after it was patched by Drupal developers, a critical SQL injection vulnerability in the popular content management system is still being exploited by malicious actors to hack websites.

Software update and support tools preinstalled on PCs from some of the world’s biggest original equipment manufacturers (OEMs) introduce serious vulnerabilities that expose users to remote attacks.

To respond to mounting cyber-attacks, advanced persistent threats, and insider leaks, enterprises and government entities need reliable, real time visibility into their IT security posture. Unfortunately, it can take weeks or months to detect intrusions using traditional methods, during which time attackers can exploit vulnerabilities to compromise systems and extract data.

A large number of ransomware families have emerged over the past several months, and a new one is now making the rounds, Microsoft researchers warn.

Trustwave SpiderLabs has discovered a 0-day Windows exploit being offered for sale on an underground forum for Russian speaking cyber criminals. Although the researchers cannot be absolutely certain that the exploit is genuine, they suspect it is - and further expect that the exploit will find its way into criminal hands.

Recently released version 6.0 of the Tor (The Onion Router) browser brings along multiple privacy and security improvements, along with other fixes.

As attackers have become better at evading traditional signatures and malware sandboxes, security teams are increasingly turning to behavior-based detection models to find the signs of an active cyber attack. This behavioral approach to finding threats comes with a lot of advantages.

Two Japanese men were arrested Tuesday for allegedly stealing money from an ATM, with local media reporting they were part of a coordinated nationwide heist that netted millions of dollars earlier this month.

An advanced persistent threat (APT) group believed to be linked to the government of the United Arab Emirates (UAE) has been observed targeting journalists, activists and dissidents.

ICS-CERT has released a security advisory for an ICS product used in the energy industry that cannot be patched, and there are publicly available exploits.

Former top social network Myspace was apparently hacked some time ago, with the data that was stolen at the time appearing online last week. News of the leaked Myspace account information comes just days after huge number of LinkedIn account details stolen back in 2012 appeared for sale.

A researcher reported finding an unprotected database belonging to Pacific Gas and Electric (PG&E), a major natural gas and electric utility based in California. The database contained a lot of potentially sensitive information, but the company initially claimed the data was “fake.”