Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

A group of former and current students have sued Google in federal court in San Jose, California, alleging that the company scanned their Gmail accounts and gathered data for advertising purposes.

The details of users who registered accounts on the forums dedicated to Bohemia Interactive’s DayZ video game have been stolen by hackers, the developer warned on Thursday.DayZ is an open world survival video game that is currently in early access Alpha. First released in December 2013, the game had already reached 3 million sales by January 2015.

A vulnerability in Avast’s SafeZone tool allowed attackers to read any file on the system by getting the victim to click on a link, Google researcher Tavis Ormandy revealed on Thursday.

A researcher has made available exploits for a couple of serious vulnerabilities in Netgear’s ProSAFE NMS300 network management system for which the vendor has yet to release patches.Netgear’s ProSAFE NMS300 Management System is designed to make it easy for administrators to monitor and manage their networks from a web-based interface.

Former Norse Corp. CEO Sam Glines Issues StatementFollowing a recent report on the pending demise of threat intelligence firm Norse Corp. by investigative reporter Brian Krebs, former CEO Sam Glines has broken the silence and issued a statement, providing some details into what’s happening at the firm.

Researchers at vulnerability management company Outpost24 have identified a series of vulnerabilities that can be exploited by a remote attacker to take complete control of Sauter’s moduWEB Vision SCADA product. The vendor has released a firmware update to address the issues.

Hidden Tear, the so-called educational ransomware that was released as Open Source in August 2015, has been used to create more than two dozen spin-offs, Kaspersky Lab researchers warn.

A Microsoft researcher has discovered what some believe could be an intentional backdoor in the popular Socan networking utility.The vulnerability, whose existence was brought to light earlier this week, affects Socat 1.7.3.0 and 2.0.0-b8. The issue has been addressed with the release of versions 1.7.3.1 and 2.0.0-b9.

In medicine, the very belief that you’re doing something to improve your medical condition has enormous efficacy. This is called the Placebo Effect. Most modern medicines can only dream of obtaining efficacy results on par with the Placebo Effect, so strong is it.

Microsoft on Tuesday announced that the latest version of its Enhanced Mitigation Experience Toolkit (EMET) includes Windows 10 compatibility, and brings several other enhancements.

Threat intelligence has received a lot of attention from the industry, ranging from vendors expanding their product portfolios and venture capitalists funding new start-ups to end user organizations looking for insights into advanced cyber-attacks that aren’t available from traditional perimeter defense tools. However, threat intelligence in and of itself is just another data source that adds to the complexity and velocity of having to analyze data in a manual fashion.

Security firm Check Point reported on Tuesday that it identified a serious vulnerability in eBay that can be exploited for malware and phishing attacks, but the e-commerce giant believes the risk is low.

The developers of the popular content management system WordPress announced on Tuesday the availability of version 4.4.2, a release that patches a couple of security issues and many functionality bugs.

Former U.S. Nuclear Regulatory Commission Employee 'Tried to Sell Nuclear Secrets'A former Department of Energy employee pleaded guilty today to a federal offense stemming from an attempt to hack agency computers to steal and sell nuclear secrets to Iran, China and Venezuela, the U.S Department of Justice said Tuesday.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.

Cloud Security

Artificial Intelligence

Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.