SecurityWeek

Microsoft Ends Life of Internet Explorer 8, 9, 10 Microsoft’s Internet Explorer 8, 9, and 10 will reach End of Life (EOL) status as of January 12, 2016, when they will stop receiving new updates.

Nasty mobile malware found infecting Android devices in September 2015 via Google Play has made a comeback, security firm Lookout reports.

Researchers from Proofpoint say they recently discovered a rogue app store that lets iOS device users download apps from a catalog offering more than 1 million apps, without having to jailbreak their device.

While investigating activity associated with the RIG exploit kit, researchers at Cisco managed to cause some damage to an operation, but an uncooperative service provider prevented them from completely shutting it down.

The first security advisory published by VMware in 2016 describes an important guest privilege escalation vulnerability in VMware Tools.VMware Tools includes utilities designed to enhance the performance of the virtual machine (VM) guest operating system and improve VM management.

The first series of security updates released by Adobe in 2016 will be for the company’s Acrobat and Reader products.

Many financial organizations in the UK are failing to properly configure SSL (Secure Sockets Layer) certificate security of their websites, putting user’s information at risk, researchers have discovered.

An infostealer malware family identified by researchers at Zscaler ThreatLabZ leverages compromised digital certificates to avoid being detected by security products.

Security certificates from the free certificate authority (CA) Let’s Encrypt are being abused by cybercriminals in a malvertising campaign, Trend Micro has discovered.

With a Better Understanding of What the Future May Hold, Cyber Defenders Can Gain an Upper Hand With the Adversary

Romanian law enforcement authorities assisted by Europol this week arrested eight individuals suspected of being part of an international group that used malware to steal money from ATMs.

Time Warner Cable said on Wednesday that it had been contacted by the FBI who notified the cable TV and Internet service provider that its customers’ email addresses including account passwords may have been compromised.

Starting on January 1, 2016, Firefox 43 began rejecting new SSL certificates that use the SHA-1 cryptographic hash function, but the latest version of the browser (43.0.4) no longer does that.

The developers of the WordPress content management system (CMS) have released a security and maintenance update to address a vulnerability and dozens of non-security issues.