SecurityWeek

US and British intelligence services can tap into mobile voice and data communications of many devices after stealing encryption keys of a major SIM card maker, a report said Thursday.

Researchers at FireEye revealed more information about how attackers can compromise iOS devices. 

Cyber attacks are increasingly sophisticated and discrete. Nation states and cybercriminal organizations frequently bankroll and mastermind these attacks with the aim of financial or political gain. If attackers have high-powered backing behind them, shouldn’t defenders as well? Isn’t it time that organizations’ top leaders are actively engaged in defense? Granted, the vast majority of enterprises have an executive with direct responsibility for security.

Proposed changes to a rule that governs the issuance of search warrants would make it easier for the United States government to obtain permission to remotely hack into computers, but Google warns that the amendment could have serious implications for privacy and security.

Even as cyber-threats circulate, the boards of directors at many enterprises continue to remain out of the loop when it comes to security.

The European Union Agency for Network and Information Security (ENISA) has published a new study on the challenges of developing certification schemes for cybersecurity professionals in the field of Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA).

Many Lenovo users started complaining last year about a piece of adware being pre-installed on their new computers. After a close analysis, experts have determined that the application poses serious security risks.

A new survey by Enterprise Strategy Group found that improving incident response and detection are driving plans to invest in endpoint security technologies in 2015.

Network security firm Check Point Software Technologies announced on Wednesday that it has acquired Hyperwise, a privately held, security startup focused on CPU-level threat prevention technology.

For several years now, cybercrime in the financial sector was synonymous with banking botnets such as Zeus and Carberp. By and large, these malware families and their many descendants worked by infecting banking customer’s computers and either stealing passwords or manipulating online banking sessions to steal funds.

A piece of malware installed on the systems of Seattle-based casual gaming company Big Fish Games has been used to steal customer payment information.

Researchers at Kaspersky Lab have conducted a detailed analysis of some of the plugins used by the advanced persistent threat (APT) group known as BlackEnergy2 (BE2), or Sandworm Team.

CAVIRTEX, one of Canada’s biggest Bitcoin exchanges, announced on Tuesday that it’s shutting down its operations as a result of a potential security breach.

A combination of vulnerabilities could have allowed a malicious hacker to delete any comment on Facebook, according to a researcher.

Washington  - Iran is "good," China and Russia are "very good," but North Korea's cyberattack capabilities are actually not that great, according to an impromptu ranking by US President Barack Obama.