SecurityWeek

Researchers at SentinelOne have analyzed a new variant of the notorious banking Trojan Zeus and managed to access the control panel used by cybercriminals to monitor and control their operations.The new Zeus variant has been used to target major Canadian banks, including the National Bank of Canada, the Royal Bank of Canada, and the Bank of Montreal.

Malicious actors are encrypting website databases and holding them for ransom, Switzerland-based security firm High-Tech Bridge revealed on Wednesday.File encrypting ransomware has become highly problematic for both regular Internet users and organizations. However, researchers at High-Tech Bridge have spotted a new type of attack that threatens businesses.

It didn't take long for information security professionals to take to Twitter, blogs, and social media to blast the latest White House proposals for cybersecurity legislation. A small group of civic-minded professionals are calling on the industry to stop complaining and actually do something about it.

InfoArmor, a provider of fraud and identify theft protection services, has acquired cybercrime research firm IntelCrawler for an undisclosed sum.

Researchers at Dell SecureWorks say the notorious ZeroAccess botnet has resurfaced and is back distributing click fraud templates to compromised computers.

A bug is haunting Linux systems. The Ghost vulnerability recently revealed by researchers at Qualys has triggered comparisons to Shellshock, but some experts say that both the impact and how organizations should approach patching it is different.

US Watchdog Urges Safeguards for 'Internet of Things'Washington - A US government consumer watchdog agency called Tuesday for better privacy and security to be built into the myriad of connected devices, for fitness, smart homes or other uses.

VMware has released security updates that address several vulnerabilities in vCenter Server, ESXi, Workstation, Player, and Fusion.

In plain terms, 2014 sucked for information security. Mega-breaches at retailers, insider theft at banks, and human error at universities and hospitals. The sliver lining may be the fact that senior managers are finally realizing their organizations have to do a better job of securing their networks, users, and data.

A serious vulnerability in the privacy-focused Blackphone could have been exploited by a remote attacker to execute arbitrary code on a targeted device, a researcher revealed on Tuesday.

Adobe has updated Flash Player to version 16.0.0.296 to address a zero-day vulnerability exploited in the wild and a critical security hole that can be leveraged for remote code execution.

Security updates were released by Apple on Tuesday for OS X, iOS, Safari and Apple TV. The updates address a large number of vulnerabilities identified by the company’s internal security team and external researchers.

Singapore Forms Cyber Security Agency After World Hack AttacksSingapore's government will set up a new agency to strengthen cyber security, Prime Minister Lee Hsien Loong's office said Tuesday, amid more reports of high-profile hacking incidents worldwide.