SecurityWeek

Security experts have been analyzing the Juniper Networks firewall backdoors whose existence was brought to light last week, and they’ve discovered what appears to be the root cause for both the administrative access and VPN decryption issues.

The technology that drives the shadowy cryptocurrency bitcoin is drawing interest from the established banking industry, which sees a potential to revolutionize the sector.

Congress on Friday passed legislation to fight cyber threats, pushing the measure through by tucking it into a sprawling government funding bill, after earlier failed attempts.

Google is adjusting its indexing system to crawl HTTPS pages in favor of their HTTP equivalents, the Internet giant announced on Thursday.

A researcher has identified half a dozen vulnerabilities, including ones rated high severity by ICS-CERT, in industrial routers from eWON.

Boston-based security tools maker Rapid7 said on Thursday that the latest version of its AppSpider web application security testing solution can now automate the testing of APIs.

Cybersecurity Disclosure Act of 2015 Would Prioritize Cybersecurity at Public Companies Through SEC Disclosures  

Microsoft on Thursday announced that it plans on removing trust on root certificates issued by 11 Certificate Authorities (CAs) in January 2016.

Canadian smartphone maker BlackBerry is determined to help law enforcement and government agencies in their investigations even when that means breaking its commitment to privacy, John Chen, the company’s CEO says.

Organizations that haven’t installed the latest security updates from Microsoft are exposed to attacks due to a serious vulnerability found by a researcher in the Outlook email client.

A company which sells identity theft protection services agreed Thursday to pay a fine of $100 million for failing to protect consumer data in the largest settlement on record, officials said.

Landry’s announced on Thursday that it’s investigating reports of unauthorized charges on payment cards used at some of its restaurants.

Networking and security company Juniper Networks revealed on Thursday that it has identified a couple of serious vulnerabilities that can be exploited to gain administrative access to some firewalls and decrypt VPN traffic.

UPDATED. A researcher claims he was threatened by Facebook after he responsibly disclosed a series of vulnerabilities and configuration weaknesses that allowed him to gain access to sensitive information stored on Instagram servers, including source code and the details of users and employees. Facebook, on the other hand, has accused the researcher of intentionally withholding bugs and information from its team.

US Defense Secretary Ashton Carter acknowledged Thursday making a "mistake" when he used his personal email for government business in the early part of his tenure, triggering concerns hackers could access sensitive information.

With Christmas fast approaching, many people are using retailers’ mobile applications to create wish lists for their friends to access, yet those who used Target’s app this holiday season might have shared their personal information beyond those intended.  

A researcher has identified several high severity vulnerabilities in a base station product from Austria-based wireless telemetry solutions provider Adcon Telemetry.

Expanding Beyond Generic Threat Intelligence to Cyber Situational Awareness Empowers Organizations to Make More Informed Security Secisions

Researchers have identified several vulnerabilities in the network management system (NMS) products offered by various companies.

California motor vehicle department officials on Wednesday proposed self-driving car regulations that included mandating that a person could take the wheel if needed.