SecurityWeek

Researchers at Citizen Lab have analyzed the popular mobile web browser UC Browser and discovered that it’s plagued by some serious security and privacy issues.

Australian telecommunications giant Telstra revealed on Wednesday that the corporate network of Pacnet was breached by an unknown actor.

The recently disclosed Transport Layer Security (TLS) vulnerability dubbed Logjam affects numerous cloud services, cloud security company Skyhigh Networks reported on Wednesday.

Healthcare insurer CareFirst BlueCross Blue Shield confirmed today that it was the victim of a data breach last June that impacts 1.1 million people.

Apple released on Tuesday its first update for Watch OS, the iOS-based operating system that runs on the Apple Watch.Watch OS 1.0.1 patches a total of 13 vulnerabilities affecting components such as the kernel, Secure Transport, FontParser, the Foundation framework, IOHIDFamily, and IOAcceleratorFamily.

Much like an undiagnosed illness, cybercriminals are managing to stay undetected long after compromising corporate networks, a new study has found. 

Google announced on Tuesday that Chrome 43 is available for download. The latest release contains numerous improvements and fixes, including patches for a total of 37 security bugs.

Researchers have analyzed the Diffie-Hellman (DHE) key exchange and they’ve come across a new vulnerability that puts a large number of online services at risk.

A serious vulnerability affecting the NetUSB kernel driver developed by Taiwan-based tech company KCodes exposes millions of routers to hack attacks, researchers have warned.According to its website, KCodes is one of the leading developers and suppliers of USB over IP solutions. The company says over 20% of world’s networking devices include KCodes technology.

Some 140 tech companies, civil liberties and privacy activists urged the White House Tuesday to pull back efforts to weaken encryption or include law enforcement "backdoors" on technology products.

The state of affairs when it comes to dealing with distributed denial-of-service attacks is not particularly rosy, according to Akamai Technologies' 'Q1 2015 State of the Internet - Security Report'. 

The chief executive of United Airlines cast doubt Tuesday on claims by a security researcher about hacking the controls of a jetliner from its entertainment system. "There are clear firewalls between a Wi-Fi system and any kind of control," United president and CEO Jeff Smisek told a US Senate hearing.

On Monday, at the IEEE Symposium on Security and Privacy taking place these days in San Jose, California, Microsoft released details on a new research project aimed at helping organizations protect data stored in the cloud.

One of the things I have observed that is missing the most in the security field is structure. Security leaders struggle to replicate successes from one enterprise to another largely because they are starting from scratch at every new turn. However, anecdotal evidence from client engagements shows that a rigid structure won’t fit all use cases which is absolutely true as each enterprise has its unique quirks and nuances that makes it just different enough to buck the pattern.

Malicious actors are using a trojanized version of PuTTY, the popular open-source Secure Shell (SSH) and telnet client, to gain access to remote computers and steal valuable data, Symantec warned on Monday.

Researchers at Fortinet's FortiGuard Labs have identified an arbitrary code execution vulnerability in IBM SPSS Statistics, the popular statistical analysis solution.

Researchers have discovered address bar spoofing vulnerabilities in the Safari and Google Chrome for Android web browsers. Cybercriminals can exploit the bugs in phishing attacks.

Oracle has released updates for its products to address the VENOM vulnerability impacting virtual environments.

Cisco reported earlier this month that the Rombertik malware attempts to destroy the master boot record (MBR) of infected devices to prevent researchers from analyzing the threat. However, Symantec says the feature is actually designed to prevent unauthorized use of the Trojan.

Scammers apparently based in Nigeria have been stealing information from various companies in the oil logistics sector, according to a report published by Panda Security.