SecurityWeek

What is SDN and Why Is Traffic Visibility Important to Security?

A vulnerability in Comcast’s Xfinity Home Security system could allow thieves to break into homes without triggering the alarm, researchers have warned.

Google on Monday released the latest set of updates for its Android operating system (OS), including fixes for five critical security vulnerabilities found in the popular mobile OS.

Exploit acquisition firm Zerodium is offering up to $100,000 to anyone who can provide an exploit for bypassing the Flash Player heap isolation mitigation introduced recently by Adobe.

In light of recent discussions regarding encryption backdoors, the Dutch government said it does not believe the adoption of restrictive legal measures against the development and use of encryption in the Netherlands would have a positive impact.

A hacking group going by the name of "New World Hacking" claimed responsibility for taking down BBC websites for multiple hours on New Year’s Eve through a distributed denial of service (DDoS) attack, but said they were only testing a new attack tool.

Many Users Fail to Propertly Protect Their Mobile Devices: ReportThe use of mobile devices has increased significantly over the past years, yet many users fail to properly protect their smartphones and tablets, a recent report from Kaspersky Lab reveals.

A Christian conservative organization is believed to be responsible for exposing the details of millions of U.S. citizens by failing to ensure that its databases could not be accessed by unauthorized individuals.

Computers and mobile devices might be the main targets for cybercriminals at the moment, but the fast expanding Internet of Things (IoT) market is creating new opportunities for attacks, and Samsung appears determined to prevent that.

North Korea has developed its own computer operating system, dubbed Red Star OS, which represents the dream software for any government looking for the tightest surveillance on individuals, researchers claim.

Apple’s desktop and mobile operating systems are at the top of the list when it comes to the number of distinct vulnerabilities that have been publicly disclosed in 2015, data from vulnerability aggregator CVE Details shows.

Researchers at security firm Emsisoft have analyzed Ransom32, a new piece of ransomware written in JavaScript.

“It’s not a matter of if, but when you’ll get attacked.” It may have become a hackneyed phrase but it holds true. Every organization must become more resilient to cyberattacks. As we ring in the New Year, now is a great time for the security industry to resolve to provide organizations with what they need to deal with this reality: security solutions that provide faster time to detection and resolution.

BlackEnergy Group Uses Destructive Plugin in Ukraine AttacksA threat group has been using the Russia-linked BlackEnergy malware family in attacks aimed at news media and electrical power organizations in Ukraine, ESET reported on Sunday.

After saying that it would cease offering services in Pakistan after refusing a government demand for a backdoor into its encrypted communication service, BlackBerry said it will now continue service in the market. 

The United States continues to spy on Israeli Prime Minister Benjamin Netanyahu's communications despite promising to curtail the hacking of its allies, The Wall Street Journal reported Tuesday.

Microsoft on Wednesday announced plans to inform users when it believes that their accounts have been targeted or compromised by actors working on behalf of a nation state.

Recently, my wife introduced me to my new favorite show, Drunk History. If you haven’t yet seen it - and you have a sense of humor - you should seek out this hilarity immediately.

Steam deployed a buggy caching configuration while trying to resolve a DDoS attack that hit the popular gaming platform on Christmas Day, which resulted in the personal information of some users being displayed to others.

Windows 10 devices have built-in disk encryption that is turned on out of the box, offering additional data protection, but the recovery keys are automatically copied to Microsoft servers when users login using their Microsoft accounts.