SecurityWeek

An audit has found that the U.S. Nuclear Regulatory Commission’s security operations center is not optimized to protect the agency’s networks, which raises some concerns given the increasing volume of cyberattacks aimed at government systems.

Cisco has released software updates to address several critical and high severity vulnerabilities identified in various networking and security products.

Shape Security today announced that it has raised $25 Million in a Series D funding round to accelerate deployments of its Botwall Service, with specific plans to expand further in China.

One of the vulnerabilities patched by Microsoft on Tuesday with the first round of security bulletins for 2016 was a Silverlight zero-day which Kaspersky Lab identified in November as a result of an investigation into Hacking Team’s exploits.

Enterprise software maker SAP on Tuesday released a new set of security updates for its products in its SAP Security Patch Day for January 2016.

Mozilla has awarded a researcher $2,500 for responsibly disclosing a stored cross-site scripting (XSS) vulnerability affecting the company’s add-ons website.

In 2014, we consumers were beset with news of breaches at eBay, Home Depot, and J.P. Morgan Chase. By designating 2014 as “The Year of the Mega-Breach,” the security community had hoped to bring awareness to the challenge of protecting customer data. But it turns out that the breaches of 2015 make the previous year’s ones pale in comparison.

The campaign involving the Android banking Trojan dubbed “SlemBunk” is ongoing and continues to evolve, FireEye reported on Wednesday following a detailed analysis of the cybercriminal operation.

Android.Bankosy Trojan Uses Call Forwarding to Steal Voice Call-Based Two-Factor Authentication Codes: Symantec

Many consumer-grade Internet of Things (IoT) products, such as Wi-Fi security web cameras, include security flaws that allow attackers to reprogram them and use them as persistent backdoors, Vectra Networks warns.

Carmaker Nissan on Wednesday shut down its global websites after a cyberattack that may have been motivated by anger over Japan's controversial whale and dolphin hunts. The country's number-two automaker said someone began hitting its sites on Tuesday evening.

A security hole affecting older versions of Fortinet’s FortiOS operating system allows attackers to gain unauthorized access to vulnerable devices, but the vendor says it’s not a malicious backdoor.

In its first Patch Tuesday update of 2016, Microsoft released nine updates to address vulnerabilities across various products, which exploitation of some could allow a remote attacker to take over an affected system. 

US spy chief James Clapper's personal online accounts have been hacked, his office confirmed Tuesday, a few months after CIA director John Brennan suffered a similar attack.

The Department of Homeland Security (DHS) this week awarded a $1.7 million contract for beefing up Distributed Denial of Service (DDoS) attack defenses.

US network operator Verizon Communications is routing over 4 million IP addresses that are currently in the hands of cybercriminals, researchers at The Spamhaus Project reveal.

As announced last week, Adobe has released its first series of security updates for 2016 to patch vulnerabilities affecting the company’s Acrobat and Reader products.

Europol announced on Tuesday that a couple of individuals suspected of being tied to the DD4BC cybercriminal group have been identified as part of an international law enforcement operation.

A reflected cross-site scripting (XSS) vulnerability on eBay’s website could have been exploited by malicious actors for phishing attacks, a researcher has demonstrated.

Threat intelligence feeds have become a major component of many organizations’ cybersecurity diet. A wide variety of security vendors offer up an equally wide assortment of threat feeds of the latest malware payloads, malicious domains, websites, IP addresses, and host-based indicators of compromise (IoCs).