SecurityWeek

Germany's foreign intelligence agency helped the CIA track down Osama bin Laden in Pakistan where US special forces killed the al-Qaeda leader, according to a German news report published Sunday.

Penn State University said Friday that it disconnected the network of its college of engineering from the Internet in response to two cyberattacks, with at least one believed to be conducted by threat actors based in China.

Since starting a cyber risk intelligence firm almost two years ago, I’ve had a great opportunity to meet with companies of all shapes and sizes across every industry sector. As far as their cyber defense operations go, I’ve also had a great opportunity to collect data on how industry as a whole is positioned against the cyber threat.

After malicious actors started adapting their techniques, Google has decided to ban the installation of extensions for the Chrome web browser from sources other than the Chrome Web Store.

Security Explorations has published details and proof-of-concept (PoC) code for several unconfirmed and unpatched vulnerabilities impacting Google App Engine for Java.

Crowdstrike disclosed this week the existence of VENOM, a serious vulnerability affecting many virtualized environments.

United Airlines has announced the launch of a bug bounty program, offering independent researchers who identify security holes in the company’s online services the chance to earn air miles.

Sally Beauty Holdings has confirmed it experienced a breach on its payment card system, but details remain scarce regarding the scope of the attack.

A three-year-old cyber operation is using a mix of social engineering, Microsoft Windows vulnerabilities and basic stenography to target government, military and industry officials in Taiwan and the Philippines, according to Trend Micro.

NATO and the European Union on Thursday vowed to tighten cooperation against the "hybrid warfare" that the West accuses Russia of using in the battle for influence in the former Soviet Union.

Cisco Finds Serious Flaws in TelePresence Products During Security ReviewsSoftware updates released by Cisco address several vulnerabilities in Cisco TelePresence products. The flaws have been identified by the company during internal tests and product security reviews.

More than thirty years ago, John Gage of Sun Microsystems coined the now famous phrase: “The network is the computer.” Indeed the true power of the computer comes from being connected, and with more devices connected the power grows exponentially. We see this today with cloud computing and increasingly with the Internet of Everything (IoE) which is creating unprecedented opportunities for networked connections among people, processes, data, and things.

Researchers at SEC Consult have identified some serious flaws in WSO2 Identity Server. The vendor has released patches to address the security bugs.WSO2 Identity Server, developed by Mountain View, CA-based enterprise middleware company WSO2, is a security and identity management solution for enterprise web applications, services, and APIs.

Romania-based security solutions provider Bitdefender announced on Wednesday a new technology designed to help virtualization vendors and datacenter administrators detect and block sophisticated threats.Bitdefender Hypervisor-based Memory Introspection provides organizations insight into virtualized endpoints through hypervisor-level inspection.

The Chinese threat actor known as APT17 and DeputyDog has been using profile pages and forum threads on Microsoft’s TechNet web portal to host IP addresses for command and control (C&C) servers.

The attack group "Naikon" has spent the last five years successfully infiltrating national organizations around the South China Sea in search of geo-political intelligence, Kaspersky Lab said late Wednesday evening.

Perhaps it is not surprising that any time a critical new bug appears comparisons to other notorious bugs come soon after.

The US House of Representatives voted Wednesday to end the NSA's dragnet collection of telephone data from millions of Americans, a controversial program revealed in 2013 by former security contractor Edward Snowden.

OSIsoft Resolves Security Bypass Vulnerability in PI AF ProductOSIsoft customers are advised to take steps to mitigate an incorrect default permissions vulnerability affecting the PI Asset Framework (PI AF) product.

SAP has fixed multiple vulnerabilities in compression libraries used in several SAP products discovered by Core Security researchers. Administrators should check the Support Portal for the relevant Security Notes immediately.