SecurityWeek

Sophos "Intercept X" Endpoint Security Integrates Next Generation Anti-Exploit and Anti-Ransomware Technology 

German carmaker Volkswagen has teamed up with three Israeli cybersecurity experts, including a former head of the country’s security agency, to launch a new company that specializes in protecting connected cars against hacker attacks.

ICS-CERT issued two security alerts this week after a researcher decided to disclose several vulnerabilities affecting power meters from Schneider Electric and FENIKS PRO.

Security ratings firm BitSight Technologies announced on Thursday that it has closed a $40 million Series C financing funding round, bringing the total raised to date by the company $95 million.

Attackers have been attempting to exploit a highly critical vulnerability in a third-party Drupal module. The flaw was addressed two months ago, but many website administrators have apparently still not applied the patches.

Many of the most high-profile breaches have been a result of weak links in an organization’s supply chain. The cyber attacks on Target, Home Depot and the U.S. Office of Personnel Management (OPM) are just a few examples.

Hackers have stolen the details of 6.6 million users after breaching the systems of ClixSense, a service that pays people to view ads and take online surveys.

Remember when sushi was exotic? Has it been a while since you thought of it as cold dead fish? That was probably before it became popular enough to cause endangerment of species.

Google announced on Tuesday the launch of a new hacking contest that invites researchers to find serious vulnerabilities and exploit chains in the Android operating system. The search giant is prepared to pay hundreds of thousands of dollars to the winners.

A new report from McAfee Labs shows that while malware overall continues to increase, web-based threats and Mac OS malware have declined in recent months.

Apple announced on Tuesday the release of iOS 10, Xcode 8 and watchOS 3. The new versions patch several vulnerabilities that can be exploited for information disclosure, arbitrary code execution and denial-of-service (DoS) attacks.

A zero-day vulnerability patched by Microsoft this week in its Internet Explorer and Edge web browsers has been exploited by cybercriminals in malvertising campaigns since 2014.

Hackers Leak Athlete Medical Data From Olympics Anti-Doping Agency

A relatively new Windows Trojan is capable of loading malicious applications onto Android and iOS devices connected to the infected machine via USB.

Microsoft announced on Tuesday the availability of 13 security bulletins that patch roughly 50 vulnerabilities in Windows, Internet Explorer, Edge, Office and Exchange. The company said one of the browser flaws has been exploited in the wild.

Claroty comes out of stealth mode with $32 million in funding to protect critical infrastructure.

Symantec on Tuesday launched its new Symantec Endpoint Protection Cloud (SEPC) security solution designed to marry old and new endpoint technologies in a single easy-to-use product primarily aimed at SMBs and mid-market companies of up to 1000 employees.

Adobe announced on Tuesday that security updates released for Flash Player, Digital Editions and Adobe Air SDK & Compiler patch a total of 37 vulnerabilities.