SecurityWeek

The massive breaches of US government records resulted in the theft of some 5.6 million sets of fingerprints, officials said Wednesday, raising their estimate from 1.1 million.

Hewlett-Packard this week announced the roll-out of new enterprise-grade LaserJet printers and multi-functional printers (MFPs) fitted with additional security features designed to prevent malicious attacks from breaching a company’s network.

A total of 30 vulnerabilities, including many rated as having critical and high impact, have been patched by Mozilla on Tuesday with the release of Firefox 41.

Google this week announced improved security and privacy settings for two of its services, namely Google Drive and Gmail, in an attempt to improve the overall experience of both business users and consumers. 

While politicians and security experts are constantly warning about the risk of cyber-attacks, they rarely, if ever, mention the risks associated with the Internet of Things (IoT). They should. Global connectivity between all devices creates significant security concerns. Recent reports of hackers being able to remotely control cars illustrate the immense risks posed by IoT.

Researchers continue to analyze XcodeGhost, a recently discovered threat that has been used by malicious actors to infect legitimate iOS applications.

Forbes.com visitors might have had their computers infected with malware earlier this month as a result of a malvertising campaign launched through a third-party advertising service, FireEye reported on Tuesday.

Chinese President Xi Jinping rejected allegations Tuesday that Beijing supports commercial cyber theft, labeling the practice a crime that should be punished under law. "China is a staunch defender of cybersecurity. It is also a victim of hacking," he told an audience of largely US businessmen on the first day of his state visit to the United States.

Dell today announced the availability of Dell One Identity Manager 7.0, a modular and integrated platform designed to help organizations unify security policies and improve agility.

A new malicious Android application has been discovered in Google Play, disguised as a game application called BrainTest, which could potentially have been installed on up to one million devices, according to Check Point.

Apple on Monday announced the availability of WatchOS 2. The latest version of the Apple Watch operating system patches nearly 40 security issues, including vulnerabilities that could lead to arbitrary code execution.

Live Webcast: Wednesday, Sept. 23 at 1PM ET

Zerodium, an exploit acquisition company launched this summer by the founder of the controversial French security firm Vupen, announced on Monday the start of a new bug bounty program targeting Apple’s new iOS 9 operating system.

Adobe announced on Monday the availability of updates for Flash Player. The latest version of the software patches a total of 23 vulnerabilities, including flaws that can be exploited for arbitrary code execution.

The number of Cisco routers affected by malware implants has increased to 200, according to a report published by the Shadowserver Foundation on Monday.

A security researcher has identified and reported what appears to be a denial-of-service (DoS) bug affecting current versions of Google Chrome.

A new report published last week by F-Secure details the activities of the threat group behind the notorious Duke malware family, and points to the numerous clues suggesting that the actor is sponsored by the Russian government.

Researchers have uncovered XcodeGhost, a new piece of malware designed to inject malicious code into iOS and OS X applications.

Red Hat warned users on Thursday that it detected an intrusion on two websites related to Ceph, the company’s open source distributed storage platform.

Networking equipment provider D-Link accidentally published a series of private code signing keys when releasing the source code of recent firmware updates under the GPL license.