SecurityWeek

Final Agenda Posted for 2015 ICS Cyber Security Conference

The developers of the popular content management systems (CMSs) Joomla and Drupal have released updates that address various types of security vulnerabilities.

Swiss-based visualization and automation solutions provider iniNet Solutions GmbH has released updates to address several vulnerabilities identified by Positive Technologies researchers in some of the company’s products.

Governance, risk, and compliance (GRC) solutions are intended to help organizations reduce the complexities associated with information management, process execution, and stakeholder coordination in light of increasing volatility, regulatory complexity, and security challenges. However, the broad reach of GRC solutions creates a unique set of deployment challenges from both a technical and business perspective.

The Network Time Foundation’s NTP Project has released an update for the Network Time Protocol (NTP) to address a series of low and medium severity vulnerabilities reported by experts from Cisco, Red Hat, IDA, Boston University, and Tenable Networks.

A series of software updates released by Apple on Wednesday address tens of vulnerabilities in iOS, OS X, Safari, iTunes, Xcode, watchOS and OS X Server.

In many aspects of the physical world, we’re quite accustomed to seeing things from the user perspective.  

Crowdsourced security testing firm Synack has launched a new exploitation intelligence platform designed to offer companies an “adversarial perspective” of their digital assets.

Following reports that the cost of breaking the SHA1 Internet security standard is lower than previously estimated, Mozilla is considering rejecting SHA1-based certificates half a year earlier than initially planned.

Rumors of the password’s demise have been greatly exaggerated over the years. As security professionals, we know how fragile they are in the hands of talented hackers, and how much users revile them, yet their ubiquity has proven stubborn to dislodge.

Google has stepped up the security of its Android operating system with the release of Android 6.0 Marshmallow by requiring manufacturers to enable full-disk encryption out-of-the-box for new devices.

HP Sells TippingPoint Network Security Business to Trend Micro for $300 Million HP has agreed to sell its HP TippingPoint network security line of products to Trend Micro for roughly $300 million, the two companies announced on Wednesday.

Dell on Tuesday announced a series of new security solutions and services aimed at helping enterprises implement new security strategies and protect and backup endpoints.

Updates released last week by Apple for its productivity apps address a series of vulnerabilities that can be exploited for denial-of-service (DoS) attacks, arbitrary code execution, and user information leakage.

Oracle has patched a Java zero-day exploited by the Russia-linked advanced persistent threat (APT) group known as “Pawn Storm” in attacks aimed at NATO member countries and the White House.

Microsoft announced on Tuesday the launch of a new bug bounty program covering .NET core and ASP.NET Beta, which the company says are critical building blocks in the Visual Studio Development Suite.

Oracle’s Critical Patch Update (CPU) for October 2015, released on Tuesday, resolves a total of 154 vulnerabilities affecting tens of the company’s products.

A team of French researchers have completed their analysis into the techniques of a criminal ring that in 2011 managed to steal $680,000 using modified EMV cards.

Researchers have uncovered several vulnerabilities in storage products from Western Digital and Seagate, and most of the identified flaws remain unpatched.Seagate Central Vulnerabilities