SecurityWeek

“Lizard Squad” Knocks Video Game Servers of Blizzard Entertainment OfflineServers operated by Blizzard Entertainment went down yesterday following a distributed denial of service (DDoS) attack against the video game company,claimed by the Lizard Squad hacking group. 

Dmitry Fedotov, the Russian national who created the now-defunct Blackhole exploit kit, was sentenced this week by a Moscow court to seven years in prison.

Apple will no longer release security updates for the Windows version of QuickTime, leaving two recently-discovered remote code execution vulnerabilities unpatched.The announcement that QuickTime for Windows is being deprecated was not made by Apple. Instead, Trend Micro-owned ZDI learned of the company’s decision after Steven Seeley of Source Incite reported finding two serious flaws.

San Francisco - Software titan Microsoft on Thursday sued the US government, arguing that secret warrants to search people's email violate the US Constitution. Microsoft filed the suit against the Justice Department in federal court in Seattle, near the company's headquarters in Redmond.

Researchers at IBM Security have come across a hybrid Trojan that is a combination between the Nymaim dropper and the Gozi financial malware.

FireEye researchers have identified several pieces of malware that managed to go undetected by antivirus engines for extended periods of time by using some interesting techniques.

Has Your Network Segmentation Approach Changed in light of new Technologies and Business Models?

Any information security professional knows that spear-phishing is effective. Cloudmark calls it "The Secret Weapon Behind the Worst Cyber Attacks", and lists 10 recent major breaches, from Target to OPM, that started with a successful spear-phish.

Security researcher Mike Olsen's recent discovery of a malicious iFrame in the embedded control code of a set of security cameras purchased from Amazon highlights one of the emerging threats to the internet of things: it is relatively easy to poison the consumer supply chain.

Google Fixes Flaws That Could Have Allowed Hackers to Hijack User AccountsA researcher got $12,500 from Google for reporting several vulnerabilities in the account recovery process that could have been exploited to change a user’s password.

A former employee of the U.S. Department of Energy (DoE) and the Nuclear Regulatory Commission (NRC) has been sentenced to 18 months in prison for trying to hack into DoE computers in an attempt to steal nuclear secrets.

Washington - Two key US lawmakers Wednesday unveiled legislation to require technology firms to help law enforcement unlock encrypted devices -- prompting a fierce outcry from the industry and privacy activists.

News via a German leak concerning European regulators' attitudes towards Privacy Shield was published last week with the headline, "EU-US Privacy Shield in big trouble, may not pass muster..." British lawyer David Flint commented, "Of course it won't pass muster; it's a political expedient and doesn't address any of the issues of the CJEU decision in Schrems." Both were right.

The FBI announced recently that it managed to hack the iPhone belonging to the San Bernardino shooter without Apple’s help and all signs pointed to Cellebrite being the mysterious outside party. However, people familiar with the matter said it was actually professional hackers who aided the agency in breaking into the Islamic terrorist's smartphone.

British Telecom (BT) said on Wednesday that it plans to hire 900 people across the globe to work in its cyber security business over the next 12 months.

SAP on Tuesday released its latest patch update for its products, which includes 19 patch notes, 10 of which had a high priority rating.

Siemens has informed customers that several of the company’s industrial solutions are plagued by a severe vulnerability in glibc, a library used in many software and hardware products.

One month after announcing that it had issued over one million certificates since opening to the public in December last year, free and open Certificate Authority (CA) Let’s Encrypt has come out of beta.