SecurityWeek

Router manufacturers whose products have been confirmed to be affected by the recently disclosed NetUSB driver security flaw say they are working on developing firmware updates that address the vulnerability.

Emerson’s Process Management group has released a software update to address a SQL injection vulnerability in the Emerson AMS Device Manager product.

FireEye has released a report detailing the cyber threats targeting various sectors in Europe’s Nordic countries.Government transparency, innovations in fields like renewable energy and healthcare, and rich natural resources make Denmark, Finland, Iceland, Norway, and Sweden a tempting target for malicious actors, the security firm said.

The US National Security Agency developed plans to hack into data links to app stores operated by Google and Samsung to plant spyware on smartphones, a media report said Thursday. The online news site The Intercept said US intelligence developed the plan with allies in Britain, Canada, New Zealand and Australia, a group known as the "Five Eyes" alliance.

Passwords and Multimedia Files Can Be Recovered From Hundreds of Millions of Android PhonesResearchers at the University of Cambridge have conducted a detailed analysis of the “Factory Reset” feature in Android devices and determined that it’s not as effective as it should be.

Researchers at email and web security company AppRiver spotted a campaign in which malicious actors attempted to distribute a piece of ransomware with the aid of SVG files.The attack starts with an email that appears to have a resume attached to it. The file is a ZIP archive containing an SVG file.

Security questions are sometimes offered as an extra layer of protection for web users. Unfortunately new research shows they aren't quite as effective as many may hope.

Enterprises may largely agree that threat intelligence is important, but few are doing any actual sharing themselves, according to a new survey.

As news of more data breaches and third-party originated cyber-attacks continue to make the news, businesses and regulators alike are sharpening their focus on how to report on and mitigate these risks. Board members are demanding quantitative risk data that spans all business operations, while business units need to neutralize the impact of cyber-attacks. So how can companies deal with this challenge and transition to a model that uses more data to assess risks?

Researchers at Citizen Lab have analyzed the popular mobile web browser UC Browser and discovered that it’s plagued by some serious security and privacy issues.

Australian telecommunications giant Telstra revealed on Wednesday that the corporate network of Pacnet was breached by an unknown actor.

The recently disclosed Transport Layer Security (TLS) vulnerability dubbed Logjam affects numerous cloud services, cloud security company Skyhigh Networks reported on Wednesday.

Healthcare insurer CareFirst BlueCross Blue Shield confirmed today that it was the victim of a data breach last June that impacts 1.1 million people.

Apple released on Tuesday its first update for Watch OS, the iOS-based operating system that runs on the Apple Watch.Watch OS 1.0.1 patches a total of 13 vulnerabilities affecting components such as the kernel, Secure Transport, FontParser, the Foundation framework, IOHIDFamily, and IOAcceleratorFamily.

Much like an undiagnosed illness, cybercriminals are managing to stay undetected long after compromising corporate networks, a new study has found.