SecurityWeek

A security bug that can be exploited for denial-of-service (DoS) attacks has been found in Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS) and Cisco Videoscape Distribution Suite Service Broker (VDS-SB) products.

Alfred Hitchcock once said, “I am a typed director. If I made Cinderella, the audience would immediately be looking for a body in the coach.”

The criminal gang behind the Dyre malware will target more Spanish banks and Spain-based subsidiaries of other banks this summer with fraudulent wire transfers, according to IBM security researchers.

Siemens has released a firmware update for SICAM MIC devices in order to patch a serious vulnerability reported to the company by an external researcher.Siemens SICAM MIC, which is part of the SICAM RTU product family, is a modular telecontrol device designed for energy automation. The product is deployed worldwide in the energy and other sectors.

Researchers Exploit RC4 Flaws in NOMORE Attacks Against Real DevicesResearchers have demonstrated that attacks against the RC4 cryptographic algorithm are becoming more practical and feasible than ever.

Basic security hygiene dictates login credentials should never be shared. But a new survey from Centrify shows the practice is prevalent and poorly managed.

A hacking forum described as the world's most savvy English-speaking online watering hole for criminal computer gurus has been smashed, US and European officials said Wednesday. A total of 28 people were arrested and 12 were charged.

One of the forum websites maintained by game developer Epic Games has been hacked and the attackers might have gained access to sensitive data.Epic Games is best known for video games such as Unreal Tournament, Gears of War, and Infinity Blade.

A man suspected of belonging to a network of Islamist hackers responsible for attacks on more than 3,500 websites worldwide was arrested in Bulgaria, the interior ministry announced Wednesday. The man, whose identity was not revealed, was part of a group using the acronym MECA (Middle East Cyber Army), the ministry said.

Targeted and highly sophisticated cyber-attacks are compelling security practitioners to change the way they deal with evolving threats. The damages associated with breaches are motivating companies to transition from a check-box mentality to a pro-active, risk-based approach to security. This means that security risk management needs to advance beyond traditional yearly assessments.

Web performance and security company CloudFlare has released a report detailing the number of requests it received from government agencies in the first half of 2015.

Some of the features introduced in HTML5 can be used to obfuscate web-based exploits in an effort to increase their chances of evading security solutions, according to researchers.

Oracle on Tuesday released its July 2015 Critical Patch Update (CPU). The updates address a whopping 193 security issues across multiple product families, including a Java zero-day bug exploited in the wild by a sophisticated threat group.

Microsoft has released a total of 14 bulletins as part of the company’s July 2015 security updates. The updates address vulnerabilities in Windows, Office, SQL Server and Internet Explorer, including two zero-day bugs identified by researchers while analyzing the recent Hacking Team leak.

My twins, at almost 21 months old, are absolutely in love with Curious George. If they’re ever having a bad day, in the middle of a meltdown, or it’s just too rainy outside to go play, we put on Curious George for an episode or two, and they love it. I recently watched one of the movies “Back to the Jungle,” and as they giggled and pointed along with the movie something caught my attention, too.

Adobe Releases Security Updates for Flash Player, Acrobat, Reader, Shockwave Player

Researchers at Kaspersky Lab have uncovered version 2.0 of TeslaCrypt, a file-encrypting ransomware first spotted in February 2015.

Cloud-based IT management and security solutions provider Kaseya has released software updates to address several vulnerabilities identified by a researcher in the company’s Virtual System Administrator (VSA) IT management system.

As many of the company’s tools and methods have become public knowledge, Hacking Team is preparing to release a completely new surveillance system.