Tired of being attacked by cybercriminals, some organisations are keen to take the fight back to the hackers — but the risks of ‘hacking back’ are likely to be much greater than any potential gains. Read more

A new version of the Ursnif banking Trojan is being tested out in the wild with code modifications and new attack techniques that attempt to make it even more effective. Read more

Siemens has patched several vulnerabilities, including authentication bypass and denial-of-service (DoS) flaws, in its SWT 3000 teleprotection devices. The SWT 3000 teleprotection devices are designed for quickly identifying and isolating faults in high-voltage power grids. This Siemens product is used in the energy sector worldwide. Read more

A Russian hacker already facing a lengthy prison stay in the US has been sent down for another 14 years for heading up an “organized cybercrime ring” that racked up $59m in damages across America. Read more

In a slap to Intel, custom Linux computer seller System76 has said it will be disabling the Intel Management Engine in its laptops. Last month, Chipzilla admitted the existence of firmware-level bugs in many of its processors that would allow hackers to spy on and meddle with computers. Read more

Supported Well, there’s a surprise. The National Audit Office’s report into the WannaCry ransomware and its effect on the NHS came out in late October. It points the blame at – wait for it – the NHS. Read more

Cryptocurrency exchange Coinbase will be turning over information on 14,000 of its users to the IRS – Uncle Sam’s tax collectors – thanks to an order from a US court. Read more

By mid-2018 Google Chrome will no longer allow outside applications – cough, cough, antivirus packages – to run code within the browser on Windows. Read more

Challenged on Monday by US senators to explain its failure to report that it had allowed hackers to grab records on 57 million customers and drivers and then paid hush money in an attempted year-long coverup, Uber has been presented with its second state-backed lawsuit for not alerting authorities to the pilfering. Read more

A Canadian hacker for hire has admitted ransacking webmail accounts for miscreants accused of orchestrating the Yahoo! megahack that hit all three billion Purple Palace user accounts. Read more