Intermittent DDoS attacks affecting Internet connectivity nationwide in West African nation Liberia have ceased. One researcher says it’s a test for something else.

Cisco Talos identified the Sundown exploit kit as an up-and-coming contender that may soon rival RIG in terms of size and volume.

IoT devices are being infected by new DDoS malware called Linux/IRCTelnet that borrows heavily from Aidra, Bashlite and Mirai.

Researchers have found a phony Flash Player download for Android that installs banking malware and steals banking credentials.

A variant of the Nymaim dropper has surfaced, and it includes new delivery methods, obfuscation techniques, and the use of PowerShell to download payloads.

Mike Mimoso and Chris Brook recap the news of the week, including the storylines around last week’s Dyn DDoS attack, Keen Team winning big again at Pwn2Own, and a fake Windows installer.

Microsoft announced it has extended a feature in Office 2016 that protects against malicious macros to Office 2013.

Analysis by DNS provider Dyn hints that more than 1 terabyte per second of traffic may have been used in last week’s massive DDoS attack that impacted Internet service on the East Coast.

Researchers said they observed three separate spam campaigns pushing an updated version of Locky on Monday.

Millions of IP-enabled cameras built on gear manufactured by Hangzhou Xiongmai of China is being recalled after DDoS attacks powered by compromised IOT devices took down a major DNS provider last week.