SecurityWeek

A researcher discovered that a database connected to the mobile version of Microsoft’s careers website was not properly configured, potentially allowing malicious actors to abuse it for various purposes.

Mozilla released updates for the standard and ESR versions of Firefox last week to address vulnerabilities classified as having “critical” impact.

A security update released by VMware last year to address a serious vulnerability in vCenter Server turned out to be incomplete, which is why the company has issued another patch to properly fix the problem.VMware published an advisory in October 2015 to inform customers of software updates designed to address critical security flaws affecting vCenter and ESXi.

British police said Friday they had arrested a teenager on hacking charges, as media reports said the youth was suspected of cracking the personal accounts of top US intelligence officials.

A security researcher discovered that some SOHO routers from ASUS can be accessed from the Internet even if the WAN access feature is disabled. The vendor has prepared a firmware update to address the issue.

Researchers at security firm Trend Micro have found evidence suggesting that pieces of malware involved in the recent attacks against Ukraine’s energy sector have been used to target other types of organizations as well.

Documents obtained by the New York Civil Liberties Union (NYCLU) this month show that the New York Police Department used stingrays more than 1,000 times since 2008 without warrants.

Twitter this week announced the formation of the Twitter Trust & Safety Council, an initiative designed to boost user trust across the social media network.

Endpoint security firm Bromium has introduced a new security offering that integrates threat isolation, threat analysis, and continuous host monitoring to help organizations lock down their endpoints.

Google this week said it would stop accepting display ads built in Adobe Flash starting on Jun. 30, 2016, with plans to completely remove them from its platforms by Jan. 2, 2017.

The introduction of legislation that requires vendors to place backdoors in encryption products would be futile due to the global nature of the encryption marketplace, a new study shows.

Tollgrade Communications, a company specializing in network service assurance solutions for broadband and electric utility providers, released a software update to patch several vulnerabilities affecting one of its monitoring products.

Hewlett Packard Enterprise, Trend Micro and the Zero Day Initiative have invited white hat hackers to show off their skills at this year’s Pwn2Own competition.

Cisco has released updates to address a remote code execution vulnerability affecting the company’s Adaptive Security Appliance (ASA) software.

Defenders Need to Gain a Clearer Picture of What’s Happening on Their DNS Infrastructures and IP Networks

Facebook has paid out a total of more than $4.3 million since the launch of its bug bounty program in 2011, the social media giant said on Tuesday.

Google is boosting the security of its Gmail service in an effort to keep them protected from phishing attacks, malware, and other threats.

Board Directors Need to Ensure They Have a Flexible, Responsive Cyber Defense Strategy 

The activity of the Dyre Trojan has come to an apparent stop since mid-November, with no new spam campaigns to distribute it observed ever since, security researchers note.