SecurityWeek

Industrial cyber security startup Indegy announced on Wednesday that it has raised $12 million in a Series A round of financing led by Vertex Ventures Israel.

SAP released a set of monthly security updates for July 2016, which included 10 security notes, one of which was rated Hot News.

Healthcare IT security firm Imprivata said on Wednesday that it has agreed to be acquired by an affiliate of private equity giant Thoma Bravo for roughly $544 million in cash.

xDedic, a marketplace selling access to hacked servers, has reemerged as a Tor domain after a report that exposed its illicit activity sparked its operators to take it down last month.

Organizations Must Put Security Vulnerabilities Into the Context of Their Exploitability

As part of its monthly security update cycle, Microsoft on Tuesday released 11 security bulletins to resolve multiple vulnerabilities in Internet Explorer, Edge, Office, JScript and VBScript, and .NET Framework.

Adobe today released security updates for Flash Player, Acrobat, Reader, and XMP Toolkit for Java, to address multiple Critical vulnerabilities affecting Windows, Mac OS X, ChromeOS, and Linux users.

Persistent cross-site scripting (XSS) vulnerabilities were patched over the past several days in three popular WordPress plugins, including Activity Log, All in One SEO Pack, and WP Live Chat Support.

Endpoint security firm SentinelOne has found and analyzed the dropper framework of the Furtim malware discovered in May. It describes this as the mother ship, and has named it SFG: Furtim's Parent.

Defending is an Important Piece of the Security Puzzle Too Often Missing From the Broader Dialogue

A local code execution vulnerability that affects the Intel HD Graphics Kernel Mode Driver for Windows could allow an attacker to run arbitrary code on a target system or cause denial of service, Cisco Talos researchers discovered.

Flashpoint, a threat intelligence and research company that focuses on combing the Deep & Dark Web, has raised $10 million in Series B funding, and announced its expansion into the Business Risk Intelligence (BRI) market.

The European Union on Tuesday launched a controversial deal with the United States aimed at curbing government spying on the personal internet information of European citizens.

Patchwork is a new threat actor that has been targeting numerous entities around the world using code that has been copied from various online forums, Cymmetria researchers reveal.

Over the past few years, industrial control systems (ICS) components have proven to be increasingly vulnerable and more frequently accessible from the Internet, which significantly amplifies the risk they are exposed to, Kaspersky Lab researchers warn.

DroidJack RAT Distributed via Infected Pokémon GO APK

In what I like to call a cowardly Friday afternoon data breach disclosure, Omni Hotels disclosed that several of its hotel properties were impacted by malware infecting its point-of-sale (PoS) systems. 

DoS Vulnerability Affects Symantec Endpoint Protection (SEP) and Norton Products on WindowsSymantec has recently patched a denial of service (DoS) vulnerability that plagued its Norton Security’s Portable Executable file scanning functionality. 

Over the past month, thousands of websites built on the WordPress and Joomla! content management systems have been compromised to redirect users to the CryptXXX ransomware, Sucuri researchers reveal.