SecurityWeek

Despite being criticized that it collects customer experience and diagnostic telemetry data in Windows 10, Microsoft decided months back that it would also add the same capabilities into in-market Windows 7 and Windows 8 devices, and has done so via a series of updates that arrived on these platform versions earlier this year.

A new version of the notorious Carbanak Trojan, also known as Anunak, has been spotted in the wild by researchers at Denmark-based CSIS Security Group.

Security solutions provider Tripwire on Wednesday announced the availability of Tripwire Asset Discovery Appliances, a high-performance device and application discovery solution designed to be easy-to-deploy on all types of networks.

Netflix this week released an in-house developed tool for discovering cross-site scripting (XSS) vulnerabilities in applications and for scanning secondary software programs for potential XSS flaws.

The Internet Systems Consortium (ISC) announced on Wednesday the availability of BIND 9.10.2-P4 and BIND 9.9.7-P3. The latest versions of the popular DNS software patch a couple of critical denial-of-service (DoS) vulnerabilities.

The developers of an adware installer are leveraging an old trick to access the Keychain on OS X devices, researchers have warned.

Seagate has released firmware updates to address several vulnerabilities affecting the company’s wireless storage devices.

Despite the fact that its activities have been exposed by security researchers, the Iran-linked threat group dubbed “Rocket Kitten” continues to target individuals and organizations, particularly in the Middle East.

Siemens has released a firmware update to address a vulnerability affecting RUGGEDCOM switches, devices designed to operate in harsh environments.

Over the past two years, risk management has gained a lot of attention in the media and among practitioners. Even though it has been proven to optimize business performance and lead to better investment decisions, many organizations have still not adopted a pro-active approach to addressing risks. What are the inhibitors to risk management and how can companies overcome them?

The number of gambling applications installed on mobile devices used in corporate environments is on the rise, which creates an increasingly favorable environment for data theft and other types of cyberattacks, a recent report from enterprise security company Veracode shows.

Microsoft, Google and Mozilla announced on Tuesday their intention to end support for the RC4 stream cipher in their web browsers at the beginning of 2016.

Google on Tuesday announced the availability of Chrome 45 for Windows, Mac, and Linux. The latest version of the web browser patches a total of 29 security issues, ten of which were reported by external researchers.

ThreatQuotient this week announced the general availability of ThreatQ, the company’s threat intelligence platform designed to manage and correlate threat data from external sources with internal security and analytics solutions.

The initial results of a survey conducted by a Google researcher show that a large part of public vulnerability research involves fuzzing tools.Google researcher Michał Zalewski, also known as “lcamtuf,” has carried out a study to determine how most security flaws are discovered, and by whom.

Live Webcast: Wednesday, Sept. 2nd, 2015 at 1:00 pm ET You already know the power of application segmentation to deliver data center and cloud security—now you can take segmentation to the next level. Nano-segmentation is finally a reality.

Security Will Never Enter the Consciousness of the American Public Quite Like Football.. 

A new banking Trojan has been used to target the customers of more than a dozen Japanese banks, IBM reported on Monday.Dubbed “Shifu,” the Japanese word for thief, the banking Trojan has been around since at least April, and it’s designed to target Japanese banks and select e-banking platforms used in Europe.

Internet security firm Webroot has launched a new toolkit aimed at delivering threat intelligence and increased security for connected Internet of Things (IoT) devices.