A campaign attributed to the FIN7 attackers targets restaurants with phishing emails and infected RTF Word documents that carry out fileless malware attacks.

Researchers say sensitive data can be extracted from air-gapped networks via a wireless router’s blinking LEDs.

Kaspersky Lab said it has seen some of the first exploits targeting a patched Samba vulnerability, and those are being used to mine Monero cryptocurrency.

Some customers are irked it took GameStop months to inform them that their personal and financial information could have been compromised in a breach of GameStop.com that began in August 2016.

Microsoft has found a file-transfer tool used by the Platinum APT that leverages Intel Active Management Technology to stealthily load malware onto networked computers.

How EternalBlue was ported to Windows 10, a Facebook phishing study, QakBot, and this week’s Apple security announcements are all discussed.

Moto G4 and Moto G5 model Motorola phones are vulnerable to kernel command line injection vulnerabilities.

Google removed a rooting an Android Trojan called Dvmap from Google Play that injects malicious code into an infected device’s system library.

QakBot, a worm-like, information-stealing strain of malware is back and locking users out of their Active Directory accounts.

GoDaddy, along with researchers from RSA Security and other companies, shut down tens of thousands of illegal established subdomains tied to the RIG Exploit Kit.