SecurityWeek

The US government agencies that defend the nation are in the midst of a charm offensive -- trying to win over the hearts and minds of Silicon Valley's tech workers. The move is evoking considerable skepticism from the US tech community.

Researchers have identified several vulnerabilities in Magnum 6K and Magnum 10K managed ethernet switches produced by Belden GarrettCom. The vendor has released firmware updates to address the security holes.

The FBI is investigating whether the St. Louis Cardinals' front office hacked the internal network of the Houston Astros to steal information about players.

86 Million Scam Calls Made to US Consumers Every Month, Says Pindrop SecurityBased on data from its “telephony honeypot,” anti-fraud company Pindrop Security has determined that the number of scam calls aimed at enterprises has increased by 30 percent since 2013.

Hackers and cyber-terrorists present an ever-evolving threat to airlines, with experts constantly testing for new vulnerabilities -- including the fear that drones could be used to throw a plane off course.

More than 600 million Samsung smartphones could be exposed to hacker attacks because the SwiftKey (Samsung IME) keyboard installed on them by default fails to properly validate language pack updates, according to mobile security firm NowSecure.

Google has announced the launch of a bug bounty program for Android. Researchers who report serious vulnerabilities affecting the mobile operating system can earn tens of thousands of dollars.

Nine US privacy groups have dropped out of talks on voluntary standards for facial recognition technology, after failing to agree on a code on how it could be deployed.

Following disclosures of devastating breaches of US government computer networks, officials told lawmakers Tuesday even more intrusions may be discovered with investigations and deployment of new security tools.

Researchers at Palo Alto Networks have identified a cyber-espionage operation targeting government and military organizations in Southeast Asia.

Updates released by Retrospect, Inc. for its cross-platform backup and recovery software address numerous bugs, including a password hashing weakness that puts users’ files at risk.

Researchers at Dell SecureWorks have analyzed Stegoloader, a stealthy piece of malware designed to steal information from infected systems.

Canonical has released updates for Ubuntu to address a local root privilege escalation vulnerability that can be exploited to gain administrative privileges on the system.

Officials at password manager LastPass revealed the company has been compromised in a data breach.

The minds behind Duqu 2.0 used a stolen certificate in their attacks as part of a bid to stay stealthy, according to Kaspersky Lab.

Cisco has released updates for its IOS XR network operating system to address a vulnerability that can be exploited to cause a denial-of-service (DoS) condition on CRS-3 Carrier Routing Systems.

Chinese authorities are leveraging watering hole attacks and JSONP hijacking techniques to track down users who might attempt to hide their identity online, according to unified security management and threat intelligence company AlienVault.

The Wikimedia Foundation announced on Friday that it’s in the process of implementing HTTPS by default in an effort to encrypt all traffic on Wikipedia and other websites operated by the organization.

Amazon has received nearly 1,000 information requests from government agencies in the first five months of 2015, according to the electronic commerce company’s bi-annual information request report.