SecurityWeek

Firefox 44, the latest version of Mozilla’s web browser, is now available for download and comes with a series of security patches, and has fully removed support for the RC4 cipher.

Solutions designed to make it easier for iOS app developers to quickly push out hotfixes and updates can be abused by malicious actors to bypass mechanisms set in place by Apple in an effort to maintain a secure application ecosystem, FireEye has warned.

Like Many Compliance-driven Efforts, Access Certifications are Often Hastily Implemented to Satisfy Auditors...

Misconfigured enterprise printers can be abused by malicious actors to store malicious code and evade detection, a researcher has warned.

PayPal has addressed a serious remote code execution vulnerability caused by a Java deserialization bug disclosed last year, and shared some recommendations for security practitioners based on the lessons learned in the process of dealing with the issue.Deserialization of Untrusted Data

Check Point Targets Data Centers and Large Enterprise Networks With Integrated Threat Prevention Appliances

Multi-Vector DDoS Attacks on the Rise, Survey Shows

Three banks and a pharmaceutical company in India were hit by a malicious attack recently, resulting in their networks being compromised by actors behind the “LeChiffre” ransomware.

Developers of the recently discovered open source-based “Magic” malware are blackmailing the creator of Hidden Tear and EDA2 , so-called educational ransomware, in order to force the developer to abandon the projects.

Lenovo has released updates for the Windows and Android versions of its SHAREit application to address a series of vulnerabilities reported by researchers at Core Security.

Amazon recently announced that it is now offering free security certificates to Amazon Web Services customers.

Another banking Trojan that is known to be active in Europe has been seen targeting Japan, FireEye reported on Tuesday.

Like leg warmers, data loss prevention (DLP) is back. Unlike leg warmers, DLP is actually cool, increasingly sophisticated, and something, to steal from Tim Gunn, companies will want to make work.

The U.S. House Oversight and Government Reform Committee has sent out letters to dozens of government agencies asking them about the use and patching of vulnerable Juniper Networks products.

US and EU officials expressed hope Monday on sealing a new transatlantic data-sharing pact before a looming deadline expires to avert a potentially crippling impact on American online firms including Facebook and Google.

Royal Caribbean Appoints Renee Guttman as Chief Information Security Officer (CISO) Royal Caribbean Cruises today announced that it has hired long time information securityveteran Renee Guttman as Chief Information Security Officer (CISO), effective January 25, 2016.  

Internet giant Google recently provided details on its experience with “bad” ads, and revealed that it blocked more than 780 million such ads in 2015.

A new ransomware based on open-source code has been spotted in the wild recently, and encrypts user files and ads a “.magic” extension to them, researchers warn.

A cyber espionage group linked to China has been targeting organizations in various industries, Palo Alto Networks’ Unit 42 reported on Friday.

In late 2014 my company predicted that ransomware attacks would shift from consumers to businesses to extort larger ransoms for unlocking encrypted files. Unfortunately, this prediction has come true.