SecurityWeek

It’s that time of year when thousands of students graduate and begin the next phase in their life journey. But not before they listen to commencement speeches rife with inspirational quotes like this one attributed to William G. T. Shedd: “A ship is safe in harbor, but that’s not what ships are for.”

A serious vulnerability in Unity Web Player can be exploited by malicious actors to steal sensitive information from users, a researcher has warned.Unity is a cross-platform game engine developed by Unity Technologies. The company says there are roughly 4.5 million registered developers that use Unity to create games, which are played by 600 million gamers worldwide.

New Cyber Risk Cloud Offering Helps Organizations Submit, Store, Analyze and Share Cyber Intelligence

Situational awareness. Military strategists live and die by it. Their soldiers do too. So do pilots. Even good stock brokers and traders depend on it for their very financial lives.

The Drupal security team announced this week that it’s prepared to offer up to $1,000 for vulnerabilities found in Drupal 8, the latest version of the popular open source content management system (CMS).

There are many things in the Internet of Things (IoT); so many that enterprises are often finding themselves challenged to keep up and secure them all.

U.S. Office of Personnel Management (OPM) Breach Exposes 4 Million Federal Employees

President Barack Obama has approved giving the NSA wider powers to spy on Internet traffic in search of computer hacking by foreign governments or others, US media reported Thursday, citing classified documents.

Microsoft has built a new Transparency Center in Brussels to allow foreign governments a chance to review the source code of its company's products in the name of security.

Visa and FireEye are planning to co-develop tools and services designed to help merchants and payment card issuers protect against cyber attacks targeting payment data, the two companies said Wednesday.

In my previous SecurityWeek column “Where is the Android DDoS Armageddon,” I looked at the reports that showed that mobile DDoS just isn’t a thing. Malicious mobile malware (say that three times fast with a cracker in your mouth) is barely a thing, either, once annoyance adware is removed.

Whitelisting Not Always Effective As Legitimate Applications Successfully Abused by AttackersLONDON - Infosecurity Europe 2015 - The trust-based foundations of whitelisting make it more difficult for organizations to properly protect their networks against cyber threats, Kaspersky Lab researchers have warned.

IT services and cloud providers had a tough first quarter as far as dealing with distributed denial-of-service (DDoS) attacks.

The FBI warned lawmakers Wednesday there was no way to monitor encrypted online communications among Islamic State sympathizers and called for new laws to require technology firms to unlock any secret messages among jihadists.

Cloud data security firm Adallom today announced integration with popular file sharing and storage solution Dropbox for Business, bringing additional security protections for stored data in the Dropbox cloud.

Finland-based security company F-Secure announced this week that it has acquired nSense, a privately held Danish company that provides security consultations, vulnerability assessment and incident response services and related products to enterprises.

Image Credit: AC72 Sail 4 / Foiling / ORACLE TEAM USA / San Francisco (USA)Guilain Grenier Oracle Team USA ©

Centrify, a Santa Clara, California-based provider of Identity Management solutions, today announced significant enhancements in its cloud-based Identity Service for Microsoft Office 365 (O365).

Fugitive former US security contractor Edward Snowden on Tuesday hailed as "historic" efforts to end the bulk collection of Americans' phone records, while urging campaigners to go further.

The US Senate passed landmark legislation Tuesday that ends the government's bulk telephone data dragnet, reining in the most controversial surveillance program since the 9/11 attacks of 2001. The House of Representatives has already passed the measure, which also reauthorizes key national security programs that had lapsed early this week.