SecurityWeek

When Florida police got a call from a man who said he shot four people at rapper Lil Wayne's house this month, they responded as they are trained to. Heavily armed, flanked in body armor and accompanied by sniffer dogs, officers surrounded the Miami mansion after the alleged shooter told the 911 dispatch: "I'm killing whoever else I see..."

Distributed denial-of-service (DDoS) attacks are being leveraged to circumvent cybersecurity solutions, disrupt service availability and infiltrate victim networks, according to a new report from Corero Network Security.

The notorious remote access Trojan (RAT) known as njRAT is making a comeback, according to security firms Zscaler and PhishMe.

A debate recently arose within our technical teams, which I feel reflects an industry topic that merits discussion. The term “cybersecurity” has taken on prominence, particularly with the general public, and also with commercial customers. It appears in news headlines, books and more recently, as a corporate initiative rallying cry. Yet for our security specialists, who spend their days deep within industrial systems, the standalone term “cyber” has distinct connotations.

An exploit for a Flash Player vulnerability patched recently by Adobe has already been integrated into at least two exploit kits, security firms reported.

The malicious actors behind a recently launched phishing campaign aimed at American Express customers leveraged a weakness in email authentication systems to increase the chances of their bogus messages reaching their destination.

Researchers at Proofpoint discovered a crafty new trick in the repertoire of the Dridex banking malware. Well known for leveraging macros in Microsoft Office documents to infect computers, Dridex now includes the ability to allow the malware to hold off executing until the malicious document is closed.

The 

Some of the IP phones designed by Cisco for small businesses are plagued by a vulnerability that allows a remote attacker to eavesdrop on conversations and make phone calls from affected devices, the company revealed last week.

UK-based Darktrace, a cyber security startup that leverages machine learning and mathematics to detect threats, announced this week that it has raised $18 million in funding.

Cisco on Friday shared details on what the company says is new breed of Point-of-Sale (PoS) malware that is more sophisticated and much better designed than previously seen PoS threats.

Yoast has released a new version of its popular Google Analytics plugin for WordPress to address a persistent cross-site scripting (XSS) vulnerability that could have been exploited to execute arbitrary code.

Multiple DLL hijacking vulnerabilities have been identified in a software component used in Rockwell Automation’s FactoryTalk View Studio and the FactoryTalk Services Platform.

Facebook has addressed a serious vulnerability that could have been exploited by malicious applications to gain access to users’ private photographs.The security hole was discovered by Laxman Muthiyah, who got a $10,000 reward from Facebook for his findings.

Researchers at Dutch software security company Securify have identified a total of eight vulnerabilities in EMC M&R and EMC Secure Remote Services.