SecurityWeek

Two US senators introduced a bill Tuesday that would compel tech companies, particularly social media firms like Facebook and Twitter, to warn law enforcement when they detect terrorist activity on their platforms.

As we head towards the end of the year, the annual rising of mobs of people pushing and shoving to get what they want reaches a crescendo. No, I’m not talking about the recent Black Friday sales, but rather the head coach carousel in American college football, ignited at the end of the regular season by hordes of jilted-feeling fans with torches and pitchforks.

Google this week announced the availability of Google Safe Browsing technology in its Chrome browser for Android, a feature meant to keep users safe from malware, unwanted software, and social engineering sites.

On November 13, a handful of terrorists from Belgium killed 130 Parisian citizens and tourists. Initially, it was suspected that the terrorists might have been communicating with each other using PlayStation 4 devices. Belgium’s Interior Minister, Jan Jambon, said in an interview, “It is very, very difficult for our services…to decrypt the communication from the PlayStation 4.” The U.S.

A threat group that has been active for at least seven years has used malware, phishing and disinformation tactics to target activists, journalists, politicians and public figures in various Latin American countries.

Updates released by Apple on Tuesday for OS X, iOS, Safari, Xcode, watchOS and tvOS address tens of vulnerabilities.

Adobe has released new versions of Flash Player to address a total of 77 vulnerabilities, most of which can be exploited for arbitrary code execution.

Microsoft has released a total of 12 security bulletins to address vulnerabilities in several of its products, including two Windows and Office zero-day flaws exploited in the wild.

Since it’s the second Tuesday of the month, enterprise software maker SAP has released its Patch Day Security Notes for December 2015.The company has addressed a total of 26 issues, including 19 new vulnerabilities and seven updates to previous patches. Of the 26 vulnerabilities, three have been rated “hot news” and 16 have been classified as “high” severity.

Two Iran-based threat groups that appear to be linked have been conducting cyber espionage campaigns aimed at entities in Iran and other Middle Eastern countries, Symantec reported on Monday.

EU member states and lawmakers have clinched a deal to prevent cyber attacks by requiring Internet firms like eBay, Amazon and Google to boost their defenses and report breaches, officials said Tuesday.

Google on Monday released its December 2015 Nexus Security Bulletin to patch 19 known vulnerabilities in the Android operating system, five of which are rated Critical.

A serious vulnerability found in several security products could have been exploited by malicious actors to bypass Windows protection features, data exfiltration prevention firm enSilo reported.

Britain's National Crime Agency on Tuesday launched a campaign to discourage youngsters from becoming hackers after it found the average age of suspects had plummeted to 17. The NCA's #CyberChoices campaign targets parents of boys aged 12-15 who may be involved in cyber-crime without their knowledge.

Hashcat, the popular password recovery utility advertised as the world’s fastest password cracker, has been released as open source.

Iran has arrested 53 suspects and shut down 132 websites linked to the Islamic State group since April 2014, the country's cyber police chief said Monday according to state media.

Cyber extortion is expected to gain traction among cybercriminals after attack groups such as DD4BC (DDoS “4” Bitcoin) and Armada Collective successfully boosted revenue by extorting organizations, according to threat intelligence company Recorded Future.

The Electronic Frontier Foundation (EFF) has launched its own Security Vulnerability Disclosure Program, designed as a set of guidelines on how to report security issues in software that the foundation develops or uses.

FireEye has rushed to patch a serious vulnerability identified in its products by researchers at Google’s Project Zero.