SecurityWeek

I’m sure most of us have seen one of the many cartoons recently circulated on LinkedIn. This particular cartoon caught my eye due to its profound message. In the cartoon, two people struggle to move a cart with square wheels. A third person comes along offering round wheels, but is told “No thanks! We are too busy.”

Researchers Analyze the Activities of the Group That Targeted Microsoft, Apple, Twitter and Facebook Researchers have analyzed the activities of a financially motivated corporate espionage group that has targeted a large number of high profile organizations from all across the world.

Internet security firm Avast has acquired Remotium, a provider of business-focused mobility solutions, for an undisclosed sum.

Hackers claiming to be affiliated with the Islamic State group took down the website of the Syrian Observatory for Human Rights monitor on Wednesday and threatened its director. The group calling itself the Cyber Army of the Khilafah (Caliphate) replaced the front page of the war monitor's site with a photoshopped image of the Observatory's director and text threatening him.

After nearly a month of debate, Google Chrome developers have decided that a potential security flaw that can be exploited to spoof the URL displayed in the web browser’s address bar is worth fixing.

China has released a draft cybersecurity law which immediately sparked concerns that it is too vague and could signal Beijing's widespread censorship of the Internet becoming even more far-reaching.

At DEFCON 17 in 2009, John Matherly debuted a search engine named Shodan (after the villainous computer in the cult-classic video game, System Shock). Shodan was received with some alarm in the media, who named it “The world’s scariest search engine.”

As it promised on Tuesday, Adobe has issued an emergency update for Flash Player to patch a zero-day vulnerability whose existence came to light after hackers breached the systems of surveillance software maker Hacking Team.

The Adobe Flash Player zero-day exploit discovered by researchers in the Hacking Team leak has been added to several exploit kits.

Singapore-based network technology company ANTlabs has released patches to address a couple of vulnerabilities affecting several of its gateway products.

A group of computer code experts said Tuesday that law enforcement cannot be given special access to encrypted communications without opening the door to "malicious" actors.

Air Force Staff Sgt. Presky, left, Army Master Sgt. McCarthy and civilian personnel concentrate on exercise scenarios during “Cyber Guard 2015" in Suffolk, Va., June 11, 2015. Image Credit: DoD - photo by Marvin Lynchard

Researchers have identified vulnerabilities affecting several IP camera models from AirLive, a Taiwan-based company that provides IP-enabled surveillance and networking solutions.

Attackers Likely to Exploit Flash Player and Windows Kernel Vulnerabilities Exposed in Hacking Team BreachResearchers say they have identified several exploits, including ones for zero-day vulnerabilities, in the hundreds of gigabytes of data stolen by a hacker from the systems of surveillance software maker Hacking Team.

The stable channel of Node.js has been updated to version 0.12.6. The latest version of the platform fixes a vulnerability that can be exploited for denial-of-service (DoS) attacks.The vulnerability, which impacts all Buffer to String conversions, is caused by an out-of-band write in V8's utf-8 decoder.

Cyber security is a nation-first, vendor-second issue. Recent events have frighteningly underscored the requirement to fundamentally rethink our approach to information security lest our economy, our very way of life suffer drastically.

Security researchers have come across a fake version of the popular BatteryBot Pro application for Android devices. The rogue app is designed to conduct ad fraud, send SMS messages to premium rate numbers, and download additional threats.

Verisign has launched a new cloud-based DNS Firewall designed to offer protection from threats and malware, with the ability for customers to customize filtering based on their organizational needs.

OpenSSL versions 1.0.2d and 1.0.1p will be released later this week to address a serious security bug, the OpenSSL Project Team announced on Monday.According to the developers of the popular open-source toolkit for SSL/TLS, OpenSSL 1.0.2d and 1.0.1p will be released on Thursday, July 9, and they will fix a single high severity vulnerability.

A researcher says there are 127 ipTIME router models plagued by a critical vulnerability that can be exploited by an unauthenticated attacker to remotely execute arbitrary code on affected devices.