SecurityWeek

VMware has released software updates to address several security flaws affecting some of the company’s products.

CUPS has been updated to address a couple of security bugs that can be exploited by a malicious actor to elevate privileges and execute arbitrary code on affected systems.

US technology companies are getting hit harder than anticipated by revelations about surveillance programs led by the National Security Agency, a study showed Tuesday.

Microsoft released eight security bulletins today as part of this month's Patch Tuesday, including two critical updates for Windows and Internet Explorer.

The Office of the Australian Information Commissioner (OAIC) announced today that it has completed its investigation into the data breach suffered by Adobe in 2013. The OAIC concluded that Adobe breached the Privacy Act 1988, but the agency says it’s satisfied with the software giant’s response to the incident.

The investigation into the cyberattack suffered by France's TV5Monde television channel in April is now focusing on "a group of Russian hackers", a judicial source told AFP on Tuesday.

A researcher who has analyzed the software installed on infusion pumps manufactured by Hospira says several models are plagued by the vulnerabilities disclosed earlier this year.

Continuous delivery of software and applications is one of the most significant advancements that has taken place in the computing industry in the past 25 years. It is catching on so fast that you can now hear the death rattle of the 18-month software delivery cycle.

A new and improved version of Tinba, a banking malware known for its small size, has been spotted in attacks targeting the customers of European financial institutions.

The notorious Stuxnet malware is still actively running on some computers and while the threat cannot be controlled by the original attackers, its presence demonstrates the weak security posture of these organizations.

Disconnects don't work for bridges, and they don't work for IT security either. However they exist in enterprises nonetheless.

The US Army's official website was hacked Monday with messages denouncing Washington's training of rebel fighters inside Syria, but no data was stolen, officials said.

Patch management - two words that are vital to cybersecurity, but that rarely generate enough attention.

Security startup Menlo Security emerged from stealth today armed with $25 million in funding from the closing of a Series B funding round.

ICS-CERT has published an advisory detailing a cross-site request forgery (CSRF) vulnerability found in 442SR wind turbines produced by Wilsonville, OR-based wind energy solutions provider XZERES Wind.

The National Institute of Standards and Technology (NIST) has released an updated version of its “Guide to Industrial Control Systems (ICS) Security.”The guide, initially released in 2006, contains recommendations on reducing the risks posed to ICS by malicious attacks, inadequate malware protection, errors, and equipment failures.

Researchers at Trend Micro have come across MalumPOS, a new point-of-sale (PoS) malware designed to target systems running Micros and other PoS platforms.

The White House on Friday urged Congress to come out of the "dark ages" and pass new cyber security rules, using a massive security breach to press its case for reform.

Malicious actors have been leveraging medical devices deployed in hospitals as key pivot points within the targeted institutions’ networks. Since threats are not easily detected on such systems, experts believe a lot of healthcare organizations are infected with malware that has remained undetected for a long time.

The American jailed for life for masterminding the online criminal enterprise Silk Road, which sold $200 million in drugs across the world, has appealed his sentence, court papers showed Friday.