SecurityWeek

Researchers at AlienVault have conducted a detailed analysis of the OS X version of a Trojan used in attacks aimed at Chinese organizations.

Oscar winner Alex Gibney said Wednesday he hopes his new documentary "Zero Days" exposing the secret scope of the US cyber warfare program will "rattle some cages" to trigger a debate about a global IT arms race.

When companies want to acquire new customers, they seek out the fastest, most cost-effective ways to attract business. Online attackers take the same approach when looking for their “customers” – that is, new targets for exploits to steal data and hijack accounts.

The inclusion of backdoors in encryption tools would introduce new technological risks to IT infrastructure and might turn systems designed for law enforcement into vulnerabilities, a recent paper from the European Union Agency for Network and Information Security (ENISA) states.

Researchers at Germany-based Blue Frost Security discovered a high severity vulnerability in FireEye products that allowed malicious actors to bypass the company’s detection engine and temporarily whitelist malware.

Rallies Planned at Apple Stores Nationwide to Protest Court Order Pressuring the Company to Build a “Backdoor” for the FBI to Hack the iPhone

Researchers at Palo Alto Networks have performed an in-depth analysis of Fysbis, the preferred Linux malware used by the Pawn Storm threat group. The simple, yet efficient tool is proving to be effective because Linux security in general is still a maturing area, the experts say.

UK-based Darktrace, a cyber security startup that leverages machine learning and mathematics to detect threats, announced on Tuesday that it has extended its self-learning threat detection technology to virtualized environments.

Does Discussing IT Security Spending Have to be Extremist or Establishment?

A U.S. magistrate judge ordered Apple on Tuesday to help the FBI search an iPhone belonging to the man behind the recent mass shooting in San Bernardino, California.

Cisco informed customers on Monday that the IOS software running on some of the company’s industrial switches is plagued by a denial-of-service (DoS) vulnerability.

Researchers have discovered a serious remote code execution vulnerability in the GNU C Library, also known as glibc.glibc, the GNU Project’s implementation of the standard library for the C programming language, is a library used in GNU, Linux and other systems that use Linux as the kernel.

DB Networks has launched a new Layer 7 Database Sensor to provide original equipment manufacturers (OEMs) with advanced database security capabilities.

Those who read my pieces regularly likely realize that I enjoy writing on topics around which I see a lack of clarity.  Whenever possible, I try to provide actionable information and guidance based on my experience that can be implemented operationally.  After all, advice doesn’t do an organization much good if it can’t be leveraged i

Cybercriminals are exploiting an old vulnerability in the Magento ecommerce platform to compromise online shops and steal sensitive information, using a piece of malware disguised as the patch designed to address the flaw.

Voice over Internet Protocol (VoIP) phones have become increasingly popular, but many users fail to properly secure them, allowing hackers to compromise the devices and leverage them for surveillance and other malicious activities.

Cyber intelligence startup Digital Shadows has closed a Series B funding round of $14 million, led by VC firm Trinity Ventures.

Network security firm Check Point Software Technologies has unveiled a new zero-day protection technology designed to keep endpoint devices secure across the enterprise, no matter where they are located.