SecurityWeek

Despite all the spending on cybersecurity, attackers are the ones winning the security war. And unless things change dramatically on the defense side, the situation will get far worse, was the grim conclusion RAND Corporation researchers drew in their latest report.

Global Certificate Authority (CA) DigiCert announced on Tuesday that it has acquired the CyberTrust Enterprise SSL business from Verizon Enterprise Solutions. The acquisition will help DigiCert become the second-largest CA for high-assurance SSL Certificates, behind industry leader Symantec.

Top US and Chinese officials were set to join "candid" talks Tuesday on the "complicated but consequential" ties between the world's two leading economies, with maritime disputes and cyber hacking high on the agenda.

Researchers at Trustwave have uncovered critical vulnerabilities in RubyGems, the package manager for the Ruby programming language.

Documents leaked by NSA whistleblower Edward Snowden show the NSA and the U.K.'s Government Communications Headquarters (GCHQ) engaged in a campaign to compromise security software companies and their products, according to a report from The Intercept.

European police agency Europol said Monday it was launching a continent-wide cybercrime unit to combat social media accounts promoting jihadist propaganda, particularly those of the Islamic State (IS) group.

The Core Infrastructure Initiative (CII), a project managed by The Linux Foundation, announced on Monday that it has committed financial support of nearly $500,000 for three new projects to better support critical security elements of the Internet.

In light of the seemingly endless parade of high-profile breaches, it’s easy to focus on external threats, while losing sight of insider threats.

Network security firm Fortinet (NASDAQ: FTNT), announced that Judith Sim, chief marketing officer (CMO) at Oracle, is joining Fortinet's Board of Directors, effective today. Sim joined Oracle in 1991 and brings more than 25 years of marketing experience, drawing from her roles at Oracle where she currently oversees the company's global marketing programs.

A cyber attack against Polish flagship carrier LOT grounded more than 1,400 passengers at Warsaw's Frederic Chopin Airport on Sunday, a spokesman said.

Cryptzone, a Waltham, Mass-based provider of application and content security solutions, announced this week that it has closed a $15 million Series B round of funding.

While container adoption is likely to surge over the next few years, concerns around security, certification and adequate skills remain, according to a recent survey commissioned by Red Hat.

Next-generation firewalls. Advanced threat detection. Intrusion deception. DDoS protection. These innovative security technologies work to combat security threats and attacks, to protect data and other assets from cybercriminals.

Cybercriminals have added an exploit for a recently-patched Adobe Flash Player vulnerability to the notorious Magnitude exploit kit.

WikiLeaks on Thursday released 276,394 new documents from the hack of Sony Pictures in what could be a further embarrassment for the Japanese media and electronics group. The new release adds to more than 30,000 documents published by WikiLeaks in April. Both groups of documents can be searched on the WikiLeaks page.

A team of researchers has conducted an analysis of Apple’s OS X and iOS operating systems and determined that the mechanisms put in place to prevent applications from interacting with each other are not very efficient.

Rapid7, a Boston, Mass.-based provider of security analytics software and services, has filed an S-1 registration statement with the Securities and Exchange Commission (SEC) for a proposed initial public offering (IPO) of its common stock.

The use of static keys and other encryption issues expose numerous organizations that rely on SAP products to malicious hacker attacks, researchers have warned.

Hackers disrupted Canadian government websites for several hours on Wednesday, senior officials said, but denied that any personal data had been compromised in the cyberattack.

LinkedIn has been running a private bug bounty program through the HackerOne platform since October 2014. The business-oriented social networking service provided on Wednesday some details on the benefits of having such a program.