SecurityWeek

Version 3.0 of the notorious RIG exploit kit has been released. Researchers at Trustwave have determined that the crimeware has already been used to infect more than 1.3 million devices from all over the world.

The Xen Project has released patches to address two vulnerabilities affecting the Xen virtualization software.

The FBI is having trouble filling jobs for its cybersecurity programs because of comparatively low pay and rigorous background checks, an auditor's report says.

It is no secret that data breaches and cyber attacks have become increasingly common in virtually every industry and sector. It is rare that a week goes by without news of another breach.

San Jose, California-based Zscaler, a provider of cloud-based security solutions, today announced that it has raised a massive $100 million round of funding led by late stage investor TPG.

Cybercriminals are leveraging the launch of Microsoft’s Windows 10 operating system to trick users into installing a piece of ransomware on their systems.

The U.S. Food and Drug Administration (FDA) issued an alert on Friday to warn healthcare organizations about the cyber security risks associated with the use of Hospira Symbiq infusion systems.

Fingerprint access controllers developed by Taiwan-based Chiyu Technology are plagued by a vulnerability that could allow hackers to make it easier to open the doors protected by these devices, a researcher has warned.

Cisco has released software updates to address a high severity denial-of-service (DoS) vulnerability affecting Cisco ASR 1000 Series Aggregation Services Routers.

San Francisco-based operations performance management company PagerDuty informed customers on Thursday that its systems were breached earlier this month.

Contrary to many headlines across the cyber realm, not all security incidents are a result of malicious intent. According to the results of a recent survey, 70 percent of U.S. survey respondents and 64 percent of German respondents said that more security incidents are caused by unintentional mistakes rather than intentional and/or malicious acts.

A team of researchers from Austria and France have demonstrated what they claim to be the first remote software-induced hardware fault attack. They have found a way to exploit the “Rowhammer” vulnerability remotely by using JavaScript.

This week’s cute OpenSSL vulnerability is CVE-2015-1793. This little one-line OpenSSL bug could allow an attacker who has a legitimate end-leaf certificate to circumvent the OpenSSL code that validates the certificate’s purpose.

Facebook announced today the general availability of Security Checkup, a new tool designed to help users better protect their accounts.

Crowdsourced security testing company Bugcrowd has released its inaugural “State of the Bug Bounty Report,” a study that provides a detailed analysis of the bug bounty economy.