SecurityWeek

The US Senate passed landmark legislation Tuesday that ends the government's bulk telephone data dragnet, reining in the most controversial surveillance program since the 9/11 attacks of 2001. The House of Representatives has already passed the measure, which also reauthorizes key national security programs that had lapsed early this week.

The PCI Security Standards Council published revisions to the Payment Application Data Security Standard (PA-DSS) this week to address concerns over the Secure Sockets Layer (SSL) protocol.

Phishing remains a bustling industry on the Web, according to a new report from the Anti-Phishing Working Group (APWG).

The US Senate on Tuesday advanced a landmark measure that ends the government's bulk data collection of Americans' phone records, while reauthorizing other surveillance powers that lapsed this week.

While serving as a security leader, how often have you heard or have yourself said, “If only the executives would pay attention to me?”

Just days after the developers of the Angler exploit kit started leveraging a recently patched Flash Player vulnerability to distribute malware, an exploit for the same security bug was also added to the Magnitude, Neutrino and Nuclear Pack exploit kits.

Blue Coat has released a software update to address a total of four vulnerabilities affecting the web-based administration console (WebUI) of the company’s SSL Visibility Appliance.

It has been a tough week for Hola.

A remote attacker can compromise the Extensible Firmware Interface (EFI) on Mac computers and install a rootkit by getting the device to sleep for a few seconds, according to a researcher.

Before the National Security Agency began complaining about being shut out of encrypted devices, it helped develop software for secure communications that could be adapted by the private sector.

Manufacturing supply chains are vital to the development and fulfillment of any modern technology—they change rapidly as sectors overlap, products evolve, and global locations of suppliers change. This dynamic nature of the supply chain exposes enterprises to a wide variety of risks. 

An individual claiming to be the developer of the crypto ransomware known as Locker has published the private keys needed to recover the files taken hostage by the threat.

Cyphort, a provider of threat detection solutions, today announced that it has secured $30 million in Series C funding, bringing the total raised by the company to more than $53 million.

The Rombertik malware has made numerous headlines over the past weeks due to a destructive feature that overwrites the computer’s master boot record (MBR). Researchers at ThreatConnect have conducted an analysis and traced the destructive sample to a Nigeria-based individual.

Hackers pose a real danger to self-driving vehicles, US experts are warning, and carmakers and insurers are starting to factor in the risk.

The US Senate failed Sunday to reach a deal that would prevent key counterterror provisions from expiring at midnight, after Senator Rand Paul blocked the chamber from advancing a solution.

CIA chief John Brennan warned Sunday that allowing vital surveillance programs to expire could increase terror threats, as the US Senate convened for a crunch debate on whether to renew the controversial provisions.

Crucial national security provisions appeared likely to expire midnight Sunday as Senator Rand Paul vowed to block any last-minute votes to extend or reform the controversial program that collects telephone data on Americans.

The American man convicted of masterminding the criminal website Silk Road was sentenced in a New York court Friday to life in prison over the conspiracy that sold $200 million in drugs to customers worldwide. Ross Ulbricht was found guilty in February by a jury on seven counts of narcotics trafficking, criminal enterprise, computer hacking and money laundering.

With a key law underpinning US bulk surveillance programs set to expire, the future appears murky for the hotly contested data sweep efforts led by the National Security Agency.