SecurityWeek

Mobile malware developers are competing for market share by creating highly sophisticated products or low-cost alternatives to existing offerings.An analysis of the mobile malware marketplace conducted by IBM X-Force researchers showed that cybercriminals looking to make a profit by targeting smartphone users have plenty of products to choose from.

Researchers from Intel Security recently discovered that a piece of malware dubbed "Dynamer" is taking advantage of a Windows Easter Egg called “God Mode” to gain persistency on an infected machine.

Many developers unknowingly expose sensitive data, including business-critical information, when they publish code containing their Slack access tokens on GitHub.

SSL/TLS Encrypted Network Traffic Brings Privacy for Users and Headaches for Security Teams

Researchers at F5 Networks Security Operations Center (SOC) are warning of a new campaign of the Dridex web fraud malware. Previous campaigns had recently focused attacks on financial institutions in the United Kingdom, but among the new campaign’s malware configurations, only 6 percent of the targeted institutions are UK brands, versus 80 percent in the US and 5 percent in Canada.

Security collaboration has, and still is, generating significant attention: How can we join forces and use crowd intelligence to employ better security defense strategies against growing cyber-attack threats?

Researchers discovered a severe cross-domain authentication bypass vulnerability that could have been exploited by malicious actors to gain access to Office 365 accounts, including email and files. Microsoft patched the issue within 7 hours after learning of its existence.

Google on Thursday released an updated version of Chrome 50 for Windows, Mac, and Linux, to resolve 9 security vulnerabilities in the popular web browser.

Facebook said Thursday it had received 13 percent more government requests for user data in the second half of 2015, with more than 46,000 requests worldwide. The leading social network, in its twice-annual "transparency report," said the number of items "restricted" for violating local laws more than doubled compared to the prior six-month period, to 55,827.

The PCI Security Standards Council (PCI SSC) has published the latest version of its data security standard to address increased threats and more sophisticated attacks targeting customer payment information.

Symantec on Thursday said that President and Chief Executive Officer Michael Brown will be stepping down as head of the security firm after a successor has been appointed.A search is currently underway for the Company’s next CEO, and Brown will remain on board until a replacement has been appointed. 

The US military's secretive Cyber Command (CYBERCOM) is working to destroy the Islamic State group's Internet connections and leave the jihadists in a state of "virtual isolation," Pentagon chiefs said Thursday.

The OpenSSL Project announced on Thursday that it’s preparing patches for several vulnerabilities affecting the crypto library.OpenSSL versions 1.0.2h and 1.0.1t will be released on May 3 between 12:00 and 15:00 UTC. These releases will patch several flaws, including ones rated “high severity.”

A new version of the Network Time Protocol daemon (ntpd) released this week by the NTP Project patches several low and medium severity vulnerabilities.

Information security firm High-Tech Bridge has launched a new free service to help web site owners and businesses understand and locate domain name threats that could be targeted at them and their customers. Called Domain Security Radar, the new service automatically lists existing domains that could potentially