SecurityWeek

As many of you are aware, I have spent quite a bit of time in Security Operations Centers (SOCs) over the course of my career.  I remember one particular experience like it was yesterday.  A high ranking executive came through for a whirlwind tour that literally lasted about 17 seconds.  On her way out, she screamed, “I need more pictures on those big screens!”.

Security researchers from China-based tech company Tencent have identified a series of vulnerabilities that can be exploited to remotely hack an unmodified Tesla Model S while it’s parked or on the move.

The OpenSSL Project announced on Monday that it will soon release updates that patch several vulnerabilities, including one rated as having “high” severity.

Any organization that operates a mobile work policy, whether that's through a Bring Your Own Device (BYOD) or company owned device approach, must consider an enterprise mobility management system. Gartner recently published a Magic Quadrant to help organizations choose which products to consider.

Rockwell Automation has released patches for some of its RSLogix products to address a vulnerability that can be leveraged to execute arbitrary code on a targeted system. Fortunately, the security hole is not easy to exploit.

Twitter, Dropbox, Uber and several other major tech companies have joined forces and launched the Vendor Security Alliance (VSA), a coalition whose goal is to improve Internet security.

A vulnerability related to certificate pinning allows sophisticated threat actors to compromise the systems of Tor Browser and Firefox users via man-in-the-middle (MitM) attacks and malicious add-ons.

Cisco has informed customers that further analysis of products possibly affected by the exploits and implants leaked recently by the group calling itself “Shadow Brokers” revealed the existence of another zero-day vulnerability.

Oracle announced on Sunday that it has agreed to acquire Cloud Access Security Broker (CASB) firm Palerra for an undisclosed sum.

The US homeland security chief said Friday authorities have confidence in the integrity of electoral systems despite growing cybersecurity threats.

Cisco has released software updates for its WebEx Meetings Server product to address a couple of critical and high severity vulnerabilities that can be exploited remotely for arbitrary command execution and denial-of-service (DoS) attacks.

A British man accused of hacking into thousands of United States government computers can be extradited to the US to face trial, a court in Britain ruled Friday.

Vulnerabilities discovered by a couple of researchers in the Android version of the secure messaging application Signal can be exploited by remote hackers to alter attachments and cause the app to crash.

This article stems off of a previous one I wrote, but as I’ve spoken with many organizations and read different blogs that cover cyber threat intelligence, it’s clear more level-setting is needed. While threat intelligence is considered a buzzword by some in the cyber realm, intel has actually been around for a long time.

Expert Shows FBI Could Have Easily Hacked San Bernardino Shooter’s iPhone 

The hacker group calling itself Fancy Bears has leaked another batch of athlete medical records stolen from the systems of the World Anti-Doping Agency (WADA). The organization has confirmed the leak and again blamed Russia for the attack on its systems.

Edward Snowden was a "disgruntled employee" and not a "principled whistleblower," according to a report from Congress released Thursday, which comes amid mounting pressure for a presidential pardon.The former Nat

Alongside Microsoft and Adobe, SAP released this week its monthly security updates to address a total of 19 vulnerabilities, including three high severity issues.