SecurityWeek

The Internet Systems Consortium (ISC) announced on Tuesday the release of BIND 9.10.2-P3 and BIND 9.9.7-P2. The updates for the popular Domain Name System (DNS) software address a critical denial-of-service (DoS) vulnerability that affects almost all BIND servers.

Black Vine Espionage Group Attacked Aerospace, Energy, Healthcare IndustriesSymantec has been monitoring the activities of the cyber espionage group that breached health insurance giant Anthem last year. Researchers say Anthem is just one of the threat actor’s many high profile targets.

The White House rejected a call Tuesday to pardon Edward Snowden, saying the former intelligence contractor should "be judged by a jury of his peers" for leaking US government secrets.

Cylance, an Irvine, California-based threat protection firm, has lined its pockets with new cash, thanks to a $42 million Series C funding round led by DFJ Growth.

A piece of malware and a basic cell phone are all you need in order to steal data from an air-gapped computer, according to researchers.Air-gap security is often used by organizations to protect their most valuable assets. The technique involves isolating computers that store sensitive information from the Internet and even from the organization’s internal network.

An argument can certainly be made that the economics of cybersecurity largely favor the attacker. While the takedown of Darkode was a win for the good guys, at least temporarily, the unfortunate reality is there remains a multitude of other underground forums where criminals can gain easy access to the tools and technical support needed to organize and execute an attack.

The Darkode cybercrime forum will return online soon. The news comes less than two weeks after law enforcement authorities announced that they had brought down the website.

AlienVault, a provider of security management tools and threat intelligence solutions, has launched an updated version of its Open Threat Exchange (OTX). 

A researcher has identified two vulnerabilities affecting Honeywell’s Tuxedo Touch automation controllers. The vendor has released a firmware update to patch the security holes.Honeywell Tuxedo Touch is designed to allow users to control cameras, thermostats, lights, shades, and locks via a touchscreen or voice commands.

Cybercriminals have been using the Angler exploit kit to identify and infect point-of-sale (PoS) systems.

The National Security Agency will cease its access to most bulk data collected under a controversial surveillance program in November, but retain records for litigation purposes, officials said Monday.

Enterprise mobile security firm Zimperium has identified a series of critical remote code execution vulnerabilities affecting the Android operating system. The company believes these are the “worst” Android flaws discovered to date.

Healthfirst, a not-for-profit managed care provider serving more than one million members in downstate New York, said on Friday that roughly 5,300 of its current and members had personal information compromised as a result of a fraud scheme.

A vulnerability in the Steam password recovery feature allowed anyone to hijack accounts in just a few seconds. Valve patched the security hole, but not before numerous accounts were hacked using the method.

A researcher says he has identified several serious vulnerabilities in a PHP file manager application that is used by many high profile organizations.

Representatives of the United States Census Bureau have confirmed that hacktivists of the Anonymous movement have breached part of the organization’s systems.

Researchers Charlie Miller and Chris Valasek have remotely hacked a Jeep by exploiting a vulnerability in the car’s in-vehicle connectivity system.

Actionable threat intelligence. Actionable information sharing. Actionable threat detection and incident response. Actioned-oriented, actionable actioning around actionable actions. Over the last several years, if it ain’t actionable, it ain’t, uh, well, it ain’t anything. Sounds silly, you say? Well it is - in more ways than one.

Fiat Chrysler Automobiles (FCA) has decided to recall 1.4 million vehicles after security researchers revealed that cars equipped with the Uconnect in-vehicle connectivity system can be remotely hijacked.

Network traffic visibility platform provider Gigamon (NYSE: GIMO) has launched a new platform designed to give enterprises extensive visibility into network traffic, users, applications and suspicious activity.