SecurityWeek

Cisco warned on Thursday that as a result of default encryption keys in three of its security products, customers are at risk of an unauthenticated remote attacker being able intercept traffic or gain access to vulnerable systems with root privileges.

The head of US intelligence said Thursday that China is "the leading suspect" in a massive data breach of Washington's government personnel files, but that an investigation is ongoing.

Systems and security management company Tanium announced on Thursday that it has released a new module for its Endpoint Platform that helps organizations understand the origin, scope and cause of a cyber attack across millions of endpoints in seconds.

North American healthcare organizations appear to be getting hit the hardest by the Stegoloader Trojan making headlines recently.

Login credentials belonging to 47 United States government agencies have been discovered on the public Web, intelligence firm Recorded Future said Wednesday.

Yahoo! Chief Information Security Officer (CISO) Alex Stamos said on Wednesday night that he will be leaving the iconic Internet company to take on the role of Chief Security Officer (CSO) at Facebook.

Ransomware is big business.According to the FBI's Internet Crime Complaint Center (IC3), more than 992 CryptoWall-related complaints were received between April 2014 and June 2015. During that period, victims reported more than $18 million in losses.

Researchers at Trend Micro say the zero-day vulnerability patched Tuesday by Adobe Systems has a similar underlying cause as an older flaw.

Keeping tabs on the control systems at critical infrastructure companies is challenging organizations at a time when attackers are circling.

Ercan Findikoglu Accused of Organizing Massive Global Cybercrime OperationA 33-year-old Turkish man extradited to New York appeared in court Wednesday on charges that he organized three cyber attacks costing the global financial system $55 million, prosecutors said.

Bug bounty platform provider HackerOne announced on Wednesday that it has raised $25 million in a Series B financing round led by New Enterprise Associates (NEA).

Visibility is Likely the Greatest Deficit That a Move to the Cloud Brings to a Security Organization

France summoned the US ambassador on Wednesday and said it "will not tolerate any acts that threaten its security" after leaked documents indicated Washington spied on President Francois Hollande and his two predecessors. Hollande convened a meeting of top intelligence officials and cabinet ministers to discuss the documents released by WikiLeaks the night before.

Swedish Malware Creator Jailed 57 Months in New YorkA Swedish man who created a malware program that infected half a million computers around the world was jailed for 57 months in New York on Tuesday for computer hacking.

Facebook announced Tuesday it has been using a new security tool to help detect and remove malicious software for users of the world's biggest social network. Facebook said it was working with Kaspersky Lab, bolstering a program implemented with other online security firms including ESET, F-Secure and Trend Micro.

Adobe Systems released an emergency update today to address a security vulnerability in Adobe Flash Player that is being exploited in a large-scale phishing campaign.

Researchers at Tel Aviv University have demonstrated a method of stealing encryption keys from a PC using a radio receiver small enough to hide inside a piece of pita bread.

“Put all your eggs in one basket and then watch that basket.” --Mark Twain, Pudd’nhead Wilson

Despite all the spending on cybersecurity, attackers are the ones winning the security war. And unless things change dramatically on the defense side, the situation will get far worse, was the grim conclusion RAND Corporation researchers drew in their latest report.