SecurityWeek

PRAGUE - Virus Bulletin 2015 - An analysis of the vulnerabilities discovered in the systems of organizations in various industries provides some insight on the most common types of flaws and the time it takes to address them.

The United States withdrew several CIA officers from its embassy in Beijing to protect them from being uncovered through a hack of US federal employee records, The Washington Post has reported.

Cisco said on Wednesday that it has agreed to acquire privately held, UK-based Portcullis, a consultancy that provides cybersecurity services to enterprise and government sector clients.

There is a great deal of wisdom contained in the well-known idea that we can each learn something from everyone we meet. As you may have already guessed, I’d like to take a look at this concept from a security perspective. To understand what I mean by this, and how we can learn security lessons from everyone, let’s dig a bit deeper into the idea.

Former US intelligence contractor and whistleblower Edward Snowden joined Twitter Tuesday, picking up more than a quarter of a million followers on the social network in just over two hours.

Roughly a month ago, a new banking Trojan was found targeting the customers of 14 Japanese banks, and the malware is now said to be attacking banks and wealth management firms in the UK.

Microsoft on Monday published new details on the user data collection in Windows 10, in an attempt to put controversy on the matter to rest.

XOR DDoS Botnet Pounds Organizations in Asia Akamai Technologies shared new details on Tuesday of an existing botnet that is now capable of launching 150+ gigabit-per-second (Gbps) DDoS attacks from Linux systems infected by the XOR DDoS Trojan.

Defense and technology contractor Raytheon said on Monday that it has been awarded a new cybersecurity contract with the Department of Homeland Security (DHS) that could be worth approximately $1 billion.

Many people in security are talking about “risk.” But like Inigo Montoya says, “You keep using that word, but I do not think it means what you think it means.” Perhaps the most important thing that I’ve learned that too many of us are doing terribly wrong is using probability in our formulas. Here’s why.

A Middle Eastern threat group has been targeting organizations in the MENA (Middle East North Africa) region through their IT and incident response staff, Kaspersky Lab reported on Monday.

This week Yahoo! revealed that the United States made 5,221 governmental requests for Yahoo! user data during the first half of 2015.

Webcast: The Necessity of Cloud Delivered Integrated Security Platforms - Register NowLive - Sept. 30 at 1:00PM ET

I recently attended yet another security conference where a vendor triumphantly declared that “identity is the new perimeter”. As often as this statement has been made, it seems as though it is perceived to be some sort of generally accepted truth.

The defence unit of European aircraft giant Airbus announced Monday it had struck a strategic partnership with French IT service company Atos to develop security systems against computer attacks.

IT security is renowned for being in a state of constant evolution. New threats and attack strategies pop up constantly, and security vendors offer up shiny new products designed to keep the attackers at bay.

Silent Circle announced on Monday that it has started shipping its Blackphone 2, the first component of its Enterprise Privacy Platform (EPP) announced earlier this year. 

One of CloudFlare’s customers was recently hit by a distributed denial-of-service (DDoS) attack that appeared to leverage a mobile ad network and malicious JavaScript.

A recently discovered vulnerability in cookies could enable an attacker to access private information from HTTPS sessions.