SecurityWeek

General Motors launched a vulnerability disclosure program last week, but the carmaker is currently not offering any rewards.The carmaker has invited researchers who find security vulnerabilities in GM products and services to submit a report via the HackerOne platform.

Role of Malware in Ukrainian Power Outages AnalyzedBased on the available information, ICS security experts believe the malware involved in the recent attacks targeting Ukraine’s energy sector was likely not directly responsible for the power outages.

Britain's proposed new Internet spying laws could threaten key rights if passed unchanged, UN rights experts said Monday, calling for a "comprehensive review" of the draft legislation.

David Chaum, inventor of various cryptographic protocols with more than 30 years of experience in the field, has introduced a new anonymous communications project that takes on networks such as Tor, I2P, HORNET or Vuvuzela.

Following the discovery of unauthorized code, Juniper Networks announced on Friday that it will replace the random number generation (RNG) technology in its ScreenOS operating system with the one currently used in Junos OS products.

The developers of the Drupal content management system (CMS) have started patching the update process vulnerabilities disclosed recently by security firm IOActive.

GE-owned Wurldtech, a provider of cyber security products and services for operational technology (OT), has launched a new security solution designed to protect critical infrastructure control systems and assets from cyber attacks.

The White House intensified efforts Friday to fight propaganda and recruitment by extremist groups such as the Islamic State, announcing a new task force and pressing Silicon Valley to help out.

The White House's top security officials are to meet with leading Internet companies in Silicon Valley Friday in an effort to build cooperation against terrorism.

Cybercriminals are abusing a European law on the use of web Browser cookies to trick users into clicking on a fake notification alert that actually hides a legitimate digital ad, Malwarebytes security researchers warn.

Operators of the Rovnix Trojan, which has been known to target users in Europe, have now set their sights on Japanese banks, IBM reported on Thursday.

Smart TVs running the Android operating system provide users with functionality beyond that of normal TVs, but they also create a security risk, Trend Micro reveals.

Microsoft Ends Life of Internet Explorer 8, 9, 10 Microsoft’s Internet Explorer 8, 9, and 10 will reach End of Life (EOL) status as of January 12, 2016, when they will stop receiving new updates.

Nasty mobile malware found infecting Android devices in September 2015 via Google Play has made a comeback, security firm Lookout reports.

Researchers from Proofpoint say they recently discovered a rogue app store that lets iOS device users download apps from a catalog offering more than 1 million apps, without having to jailbreak their device.

While investigating activity associated with the RIG exploit kit, researchers at Cisco managed to cause some damage to an operation, but an uncooperative service provider prevented them from completely shutting it down.

The first security advisory published by VMware in 2016 describes an important guest privilege escalation vulnerability in VMware Tools.VMware Tools includes utilities designed to enhance the performance of the virtual machine (VM) guest operating system and improve VM management.

The first series of security updates released by Adobe in 2016 will be for the company’s Acrobat and Reader products.