SecurityWeek

Karamba Security, a company specializing in solutions designed to protect connected cars from cyberattacks, has come out of stealth mode with $2.5 million raised in seed funding.

Updates released on Wednesday for the Ubuntu operating system address several vulnerabilities in the Linux kernel, including ones that can be exploited for denial-of-service (DoS) attacks and arbitrary code execution.

Security Leaders Must Change Their Mindset on How to Think About Policy, Detection and Enforcement 

The former CISO of a large intelligence community agency once told me, “The number one challenge in IT Security is the carbon-based life form.” Needless to say, that comment has stuck with me as I read articles daily about hacks with their genesis found in credentials lifted from phishing schemes.

The maintainers of the Open Sourced Vulnerability Database (OSVDB) announced this week that the project will be shut down permanently due to the lack of support from the industry.

Police have launched raids against 170 suspected cyber-criminals across Germany and in the Netherlands, France and Canada, German authorities said Wednesday, announcing the arrest of a 22-year-old chief suspect.

The DHS ICS-CERT issued three security advisories on industrial control systems (ICS) this week, again showing that critical infrastructure and industrial networks continue to face serious issues.

A group of researchers from Northeastern University have detailed a new method that allows malicious actors to launch stealthy attacks by leveraging the lack of isolation between Firefox add-ons.

Turkey's authorities launched a probe Wednesday into a leak of the personal data of some 50 million Turkish citizens, the latest breach to expose weaknesses in the country's information security.

Hiring a hacker to compromise an account with a popular email or social media service will cost you just $129, according to a new report from Dell SecureWorks on underground hacker markets.

Israeli security agencies are on alert over the potential for cyber-attacks by Anonymous on Thursday, after the hacker group previously targeted the Jewish state each April 7. The attacks in solidarity with the Palestinians have in the past succeeded in blocking government sites, including for the ministries of defense and foreign affairs.

IBM has completed its acquisition of Resilient Systems, a privately-held company that offers an Incident Response Platform (IRP) that helps organizations prepare, assess, manage, and report on privacy breaches and security incidents.

A recent layer 7 distributed denial of service (DDoS) attack managed to break all previous known records in terms of bandwidth consumption, peaking at 8.7 gigabits per second (Gbps), cyber security solutions provider Imperva warns.

A researcher has identified numerous serious vulnerabilities in routers built by Quanta Computer, a Taiwan-based hardware company that is said to be the largest original design manufacturer (ODM) of notebook computers in the world.

“What’s the cut, Papa?”“Juicy, Junior. Real juicy.”

Adobe informed users on Tuesday that it’s preparing a patch for a Flash Player zero-day vulnerability that has been actively exploited by malicious actors.

Companies in the United States aren’t confident that third-party vendors (or providers hired by their vendors) would inform them about breaches involving sensitive and confidential information, a recent survey from the Ponemon Institute reveals.

The popular messaging service WhatsApp said Tuesday it had implemented "full end-to-end encryption," a move which steps up privacy but may lead to conflicts with law enforcement agencies.

ENISA Calls for Action on Cyber Crisis ManagementEuropean Union cybersecurity agency ENISA has urged decision makers in the EU to take action and create a cyber crisis management framework before a major incident occurs.

Inkyfada, an electronic magazine investigating Tunisian involvement in the so-called Panama Papers, came under attack by hackers on Tuesday just hours after its first postings on the scandal.