SecurityWeek

For many of us in the Security Industry, the possibility of using Internet of Things (IoT) devices as a launchpad for an attack has been mostly theoretical. However, information obtained after the recent massive distributed denial-of-service (DDoS) attack against the services offered by DYN.com appears to show that the threat is real and immediate.

Domain name and DNS-based cyber threat intelligence firm DomainTools has launched a new security solution for preventing phishing attacks by idenitfying potentially dangerous domain names.

The recently disclosed "Trident" 0-day vulnerabilities that put owners of iOS devices at risk were patched in August, but the full technical details on them have been released only this week.

Akamai on Wednesday announced that as of Dec 27, 2016 it will no longer support SHA-1 certificates, after only handing out SHA-256 certificates for a period of time starting Nov. 3.

On Friday, October 21, the Internet slowed to a crawl. A new botnet attack, called Mirai, executed a distributed denial-of-service (DDoS) attack against DNS provider Dyn. The result impacted service for some of the Web’s highest profile brands. This event was the largest known DDoS attack to date.

McAfee Prepares for Independence from Intel with Product Announcements and New Branding

Monitoring network activity is key to securing any production environment. Keeping tabs on the activities of the users, applications and the devices enables operators to ensure expected and normal operations. Monitoring also allows problems to be detected and corrected before damage can occur. 

Google has announced its plans to make the Certificate Transparency policy in Chrome mandatory starting in October 2017.

A new report highlights the high number of users still operating outdated Windows operating systems and unsupported browsers. This represents a huge threat to the organizations whose users access company networks from insecure laptops and home computers within the growing adoption of BYOD policies.

A new survey published by Accenture shows that the twin security conundrums of increasing security breaches despite increased security spending, and high security confidence despite a high level of breaches, are both alive and well. These conclusions are drawn from a survey of more than 2,000 enterprise security practitioners across 15 countries in organizations with annual revenues in excess of $1 billion.

The Dirty COW vulnerability in the Linux kernel that was revealed late last month can’t be mitigated with the help of containers, security researchers have discovered.

Researchers Find Vulnerabilities in Belkin WeMo Home Automation Products

The dumpster fire that is the 2016 presidential election is thankfully almost behind us. But in its final throes, it is currently belching a peculiar pollution.

Finance minister Philip Hammond on Tuesday warned Britain will "strike back" against states hacking into strategic networks in order to avoid a military showdown, as part of a new cyber-defense plan.

A cybersecurity startup has disclosed a couple of unpatched denial-of-service (DoS) vulnerabilities affecting a human-machine interface (HMI) product from Schneider Electric.

The Windows zero-day vulnerability disclosed this week by Google has been exploited by the Russia-linked cyberespionage group known as Strontium. Microsoft has been working on a patch and expects to release it on November 8.

A new malware family targeting Internet of Things (IoT) devices to ensnare them into distributed denial of service (DDoS) botnets has emerged.

Symantec Unveils Symantec Endpoint Protection 14 With Multi-Layered Protection