SecurityWeek

The UK Government said it will conduct a joint exercise with the United States next year to test the security of civil nuclear infrastructure against a major cyber attack. Set to be officially announced soon, the exercise will “simulate a cyber attack on nuclear power supplies” to see how the two allies can work together in the event of such a cyber threat.

The cybersecurity industry is bubbling with new technologies that go after the threat du jour. The threat landscape has evolved, and cyber risk from organized crime and nation states represent a clear and present danger. The impact on enterprise security is severe. Our security is only as good as our ability to coherently and consistently put up a solid defense.

A patch released by IBM in 2013 for a Java sandbox escape vulnerability can be easily bypassed, according to the security firm that discovered and reported the issue.

Trump Hotel Collection has launched an investigation after financial institutions reported seeing fraudulent activity on payment cards used at its properties.

As the US tax season draws to a close, authorities are warning of an alarming rise in "phishing" scams designed to steal sensitive personal and financial information.

Passive Authentication May be the Future for User Authentication, and it's Just Beginning to Appear

Ransomware creators are increasingly focused on making victims pay a ransom, and Rokku, a new malware family in this segment, is the latest example.

Researchers at security firm FireEye have analyzed another hot-patching solution for iOS applications that could be abused by malicious actors to turn harmless apps into malware.

How Combining Two Completely Separate Open Source Projects Can Make Us All More SecureWhen you run an application, how can you verify that what you are running was actually built from the code that a trusted developer wrote?

A researcher has identified a serious path traversal vulnerability in a web-based human machine interface (HMI) product from industrial automation software developer ICONICS.

A new survey and report from Tanium and NASDAQ, using a research team from Goldsmiths, University of London, seeks to quantify organizations' cyber security vulnerability.

2.6 Terabytes of Leaked Documents From Panama Law Firm Mossack Fonseca Expose World Leaders, Tax Havens and Shell Companies

Microsoft has patched a serious authentication vulnerability that could have been exploited to gain access to Outlook, Azure and Office accounts, a researcher reported over the weekend.

Marcel Lazar Lehel, the 44-year-old Romanian national accused of hacking into the online accounts of many public figures, has been extradited to the United States where he made his first court appearance last week.

The UK government's attempts to ease the passage of the hugely controversial Investigative Powers Bill continued this week with a Telegraph opinion piece from William Hague (former First UK Secretary of Sate and former leader of the Conservative Party): The Brussels attacks show the need to crack terrorist communications.