SecurityWeek

FBI Director James Comey on Thursday defended his agency's efforts to force Apple to help unlock an iPhone used by one of the San Bernardino attackers, as he warned of risks of unbreakable encryption. "The San Bernardino litigation is not about us trying to send a message or establish some kind of precedent," Comey told lawmakers at the House Intelligence Committee.

Cisco has released software updates for its ACE 4710 appliance to address a high severity command injection vulnerability.

Last year, 1,673 data breaches resulted in roughly 707 million data records being compromised worldwide, according to statistics from Gemalto’s Breach Level Index report.

The IoT wave is building like a thunderous tsunami, growing larger on the horizon by the day. What is missing from the conversation, however, is how large a role software plays in the IoT equation. Plugging something into the Internet does not make it work -- it just makes it vulnerable. Value is created through the associated software. In fact, we have almost reached the point where the actual product or device and the associated software become a single logical...

In response to a motion filed by the defense in the case of an alleged Silk Road 2.0 administrator, a judge has confirmed that US authorities funded Carnegie Mellon University to conduct research on the Tor anonymity network.

The OpenSSL Project announced today that it will release versions 1.0.2g and 1.0.1s to patch several vulnerabilities, including ones rated “high severity.”The updates are scheduled for release on March 1 between 1pm and 5pm UTC, OpenSSL developers informed users.

Drupal has released versions 6.38, 7.43 and 8.0.4 to patch a total of ten vulnerabilities, including one rated critical.

Apple chief Tim Cook went public Wednesday in his battle with the FBI, saying that unlocking an iPhone in the name of fighting terrorism would be "bad for America." "I think safety of the public is incredibly important -- safety of our kids, safety of our families is very important," Cook said during a television interview with ABC News.

In July 2015, operations performance management company PagerDuty advised customers to change their passwords after discovering that its systems had been breached.

Baidu Browser, a web navigation application available on Android and Windows devices, is collecting a large amount of personally identifiable data and transmitting it to Baidu servers without encryption, Citizen Lab researchers have discovered.

Several security firms have teamed up to analyze and potentially disrupt the activities of a threat group that is believed to be behind the 2014 attack on Sony Pictures Entertainment.

Integrated Solution Provides Visibility and Improved Separation between IT and OT Environments

The French security researcher known as “Kafeine” revealed on Tuesday that an exploit for a recently patched Microsoft Silverlight vulnerability has been added to the Angler exploit kit.

Security Metrics Need to Extend beyond Quantitative Factors

Asus has agreed to settle Federal Trade Commission (FTC) charges related to the Taiwan-based hardware and electronics company’s failure to secure its routers and protect customers against cyberattacks.

Cybercriminals are increasingly focusing on tricking humans into becoming their unwitting accomplices in attempts to steal information and money, a new report from Proofpoint reveals.

Commercial and critical infrastructure organizations in Japan have been targeted in a multi-year campaign dubbed by researchers “Operation Dust Storm.”

Apple is battling the US government over accessing locked devices in at least 10 cases around the country, in addition to the iPhone of one of the San Bernardino attackers, court documents show.

Researchers at IoT security company Bastille claim to have found a way to hack computers via a vulnerability present in many wireless mouse and keyboard dongles.