SecurityWeek

The threat actors behind the political and economic cyber espionage campaign known as Operation Pawn Storm have started using iOS malware to steal sensitive information from their targets, Trend Micro reported on Wednesday.

In today’s high-risk IT environment, there’s no such thing as too much security, right? Well, that depends. As with anything in life, the devil is in the details. As organizations continue to expand their arsenal of security products in an effort to strengthen protections against advanced threats, they often introduce complexity.

Researchers at Invincea have been monitoring a malvertising campaign in which malicious actors leveraged Adobe Flash Player exploits and file-less infections to deliver ransomware.The campaign, dubbed “Fessleak” based on the email address used to register the domains involved in the attack, appears to be the work of Russian cybercriminals.

Anthem, Inc., one of the largest health care companies in the United States, reported late on Wednesday that its computer systems have been targeted in a “very sophisticated external cyber attack.”

Adobe Systems has made a patch available for a zero-day vulnerability in Flash Player that came under attack in recent days.

New York - A New York jury on Wednesday found Ross Ulbricht guilty of masterminding the online criminal enterprise Silk Road, which could see him jailed for the rest of his life. Ulbricht, 30, amassed a fortune of $18 million from the dark, secretive Silk Road website that conducted more than one million drug deals in nearly three years.

Google recently removed multiple applications from its Google Play store after reports surfaced linking the apps to adware.

A researcher has identified a serious universal cross-site scripting (UXSS) vulnerability in the latest version of Microsoft’s Internet Explorer web browser.

Siemens has resolved several vulnerabilities affecting the company’s SCALANCE industrial switches and Ruggedcom WIN base stations.

HackerOne, the popular security response and bug bounty platform, rewarded a researcher with with a $5,000 bounty for identifying a severe cross-site scripting (XSS) vulnerability.

A group of Russian hackers had — and possibly still has — unauthorized access to the network of Sony Pictures Entertainment, according to a report published on Wednesday by Taia Global.

Data breaches at companies such as Target, Home Depot, Staples, Michaels, eBay, and Sony Pictures Entertainment are raising doubts about whether organizations are investing their security dollars in the right areas.

Tokyo - A Japanese hacker who hijacked computers in order to issue death threats, leading to the arrest of several innocent people, was jailed Wednesday for his high-stakes games of cat and mouse with police.

A new survey from the Ponemon Institute calls web-borne malware not only a growing threat to enterprise data security, but a costly one.

Advanced persistent threats (APT) - given the moniker, one might think everything about them is sophisticated.