SecurityWeek

Amazon announced on Tuesday the availability of s2n, a new open source implementation of the Transport Layer Security (TLS) protocol that is designed to be simple, small, fast, and secure.

The old Routing Information Protocol version 1 (RIPv1) has been abused by malicious actors for reflection distributed denial-of-service (DDoS) attacks, Akamai has warned.

Apple Security Updates Patch Bugs in OS X, iOS, Safari, iTunes, QuickTimeApple has released security updates for many of its products, including patches for the recently disclosed EFI vulnerabilities dubbed “Dark Jedi” and “Rowhammer.”

Several Schneider Electric Wonderware products are plagued by a high severity vulnerability that can be exploited for arbitrary code execution.

Researchers at security firm ESET have conducted a detailed analysis of Dino, a sophisticated espionage platform developed and used by the APT actor known as “Animal Farm.”

A researcher says Yahoo has finally patched a SSRF vulnerability which affected all its services that required images to be processed.

Cisco said on Tuesday that it would pay roughly $635 million in cash to acquire San Francisco-based OpenDNS, the company best known for its DNS service that adds a level of security by monitoring domain name requests.

Venafi, a Salt Lake City, Utah-based provider of enterprise key and certificate management solutions, today announced that it has received $39 million in additional funding. According to the company, the new funds will be used to accelerate development of its products and support customer growth.

When it Comes to Security, What You’ve Accomplished Means Very Little

The US wiretapped two of France's economy ministers and spied on the country's largest companies, French media reported citing WikiLeaks documents, just days after it emerged the US had spied on three of the country's leaders.

A total of 130 individuals were detained and questioned by police as part of an international law enforcement operation targeting airline fraudsters.

The U.S. Office of Personnel Management (OPM) announced on Monday that it has temporarily suspended its Electronic Questionnaires for Investigations Processing (e-QIP) system after discovering the existence of a security bug.

Nearly half of the organizations using Oracle’s PeopleSoft applications are vulnerable to cyberattacks, according to a report from ERPScan, a company that specializes in securing business-critical enterprise resource planning (ERP) solutions from SAP and Oracle.

Longest Running ICS Cyber Security Conference Opens Call for Presentations for 2015 Event

Recent Operating System Update for Amazon Fire Phone Patches Security BugsThe operating system update released in May by Amazon for its Fire Phone resolves three vulnerabilities discovered by researchers at information security consultancy MWR InfoSecurity.

The More Details You Extract from Security Incidents, the Better You Can Architect Your Defense to Prevent Similar AttacksTraditional approaches to security are typically “spray-and-pray”: they provide controls that block known bad activity, usually with limited follow-up or additional investigation after a breach.

An exploit for a Flash Player vulnerability patched by Adobe last week with the release of version 18.0.0.194 has been integrated into the Magnitude exploit kit.

Honeywell Process Solutions (HPS) and Intel Security said this week that they will combine forces to boost protection of critical industrial infrastructure and the “Industrial Internet of Things” (IIoT).

Data breaches continue to be top of mind for organizations large and small. Two key dynamics are making that challenge much harder - the cloud and the growing sophistication of attackers.

As a huge college football fan, I’ve taken notice how highly competitive teams have implemented effective incentive measures to get the most out of their coaching staffs.