SecurityWeek

It is no secret that data breaches and cyber attacks have become increasingly common in virtually every industry and sector. It is rare that a week goes by without news of another breach.

San Jose, California-based Zscaler, a provider of cloud-based security solutions, today announced that it has raised a massive $100 million round of funding led by late stage investor TPG.

Cybercriminals are leveraging the launch of Microsoft’s Windows 10 operating system to trick users into installing a piece of ransomware on their systems.

The U.S. Food and Drug Administration (FDA) issued an alert on Friday to warn healthcare organizations about the cyber security risks associated with the use of Hospira Symbiq infusion systems.

Fingerprint access controllers developed by Taiwan-based Chiyu Technology are plagued by a vulnerability that could allow hackers to make it easier to open the doors protected by these devices, a researcher has warned.

Cisco has released software updates to address a high severity denial-of-service (DoS) vulnerability affecting Cisco ASR 1000 Series Aggregation Services Routers.

San Francisco-based operations performance management company PagerDuty informed customers on Thursday that its systems were breached earlier this month.

Contrary to many headlines across the cyber realm, not all security incidents are a result of malicious intent. According to the results of a recent survey, 70 percent of U.S. survey respondents and 64 percent of German respondents said that more security incidents are caused by unintentional mistakes rather than intentional and/or malicious acts.

A team of researchers from Austria and France have demonstrated what they claim to be the first remote software-induced hardware fault attack. They have found a way to exploit the “Rowhammer” vulnerability remotely by using JavaScript.

This week’s cute OpenSSL vulnerability is CVE-2015-1793. This little one-line OpenSSL bug could allow an attacker who has a legitimate end-leaf certificate to circumvent the OpenSSL code that validates the certificate’s purpose.

Facebook announced today the general availability of Security Checkup, a new tool designed to help users better protect their accounts.

Crowdsourced security testing company Bugcrowd has released its inaugural “State of the Bug Bounty Report,” a study that provides a detailed analysis of the bug bounty economy.

Industrial cybersecurity startup CyberX has launched its Industrial Threat Intelligence Platform, which the company says can help utilities identify cyber security threats in operational networks.

A vulnerability in the Android mobile operating system can be exploited to cause devices to become inoperable, said researchers from Trend Micro.

Nearly two years after it launched a bug bounty program, Yahoo says it has awarded researchers who reported security vulnerabilities a total of more than $1 million.

Commercial source code is more compliant with security standards than open source code, according to the 2014 Coverity Scan Open Source Report published on Wednesday by Synopsys.

Shellshock, the Bash bug disclosed in September 2014, is still being exploited by threat actors, according to a report from Solutionary’s Security Engineering Research Team (SERT).

Most Americans believe their government should take action against nation states that launch cyberattacks against government organizations in the United States.

HAMMERTOSS Malware From Russian Hackers Uses Popular Web Services to Conceal Attacks