SecurityWeek

Seagate has confirmed the existence of vulnerabilities in Business Storage 2-Bay NAS devices and promised to patch the issues in May.However, the company has rated the flaws as “low risk” and noted that only network-attached storage (NAS) solutions used on networks that are publicly accessible via the Internet are vulnerable.

A security researcher has released a tool that allows hackers to hijack accounts on sites that use Facebook logins.

Security Professionals Must Know the Categories of Threats an Enterprise Faces and How to Respond to Each

Health insurance giant Anthem was criticized last week after reports emerged that it had declined a security audit from the Office of Personnel Management's Office of Inspector General (OPM OIG). Some experts speculated that Anthem might have had good reasons to refuse the assessment.

Online payments group PayPal announced Tuesday it was acquiring Israeli cybersecurity firm CyActive and establishing a new security hub in Israel. The terms of the deal were not announced, but some reports this week said PayPal, which is being spun off by online giant eBay, was paying $60 million for CyActive.

Apple Patches Several Flaws in iOS, OS X, Apple TV and XcodeApple has released updates to address several security flaws, including the recently disclosed FREAK vulnerability that can be leveraged to decrypt SSL/TLS connections.

The Central Intelligence Agency has been working for years to break encryption on Apple devices, to spy on communications of iPhone and iPad users, a report said Tuesday. Investigative news site The Intercept, citing leaked secret documents, said the effort began in 2006 as Apple was preparing to launch its first iPhone.

Dell today announced the availability of a new endpoint security suite designed to help organizations of all sizes protect sensitive information and meet compliance requirements.

Researchers at Google’s Project Zero have demonstrated that a recently documented bug in some dynamic random-access memory (DRAM) chips can be exploited to gain kernel privileges on Linux systems.

Point-of-sale vendor NEXTEP SYSTEMS confirmed it was notified by law enforcement that the security of some of its systems at customer locations may have been compromised.

The White House today announced a new initiative to train more Americans for careers in the IT workforce. The program, dubbed TechHire, is a multi-pronged approach to addressing what many feel is a shortage of workers in IT.

Cybercrooks have been leveraging malicious macros hidden inside XML files to distribute the Dridex financial malware, researchers have warned.

Three individuals were indicted last week for their alleged role in what is said to be one of the largest data breaches in U.S. history. The incident even made the subject of a Congressional inquiry in 2011.

Innocent-looking help files have been used by cybercrooks to distribute a variant of the notorious file-encrypting ransomware CryptoWall, Bitdefender reported.

Washington - The FBI is investigating a string of hacks that defaced US websites with imagery from the Islamic State jihadist group, NBC News reported on Monday. Websites including a racecar speedway in the state of Ohio, a Goodwill center in Missouri and a church in Canada were defaced with the radical group's black flag, the news organization reported.

Researchers have identified a security issue in the Google Apps Admin console that could have been exploited to claim any domain and use it to send out spoofed emails.

The CIA plans to radically overhaul operations, ramping up its capability to deal with cyber threats while boosting integration between departments via a network of new units. Central Intelligence Agency director John Brennan outlined the proposed changes to the agency in a message to staff on Friday described as a "Blueprint for the Future" covering four key areas.

News broke this week that Hillary Clinton, who will likely run for president in 2016, exclusively used a personal email account to conduct official government business during her tenure as U.S. Secretary of State.

Siemens has produced updates to address security flaws in several of the company’s solutions. ICS-CERT and Siemens have published a total of five advisories providing information on the vulnerabilities.

While a growing number of financial services organizations are moving their data and applications to the cloud, most of them do not have a concerted cloud strategy with appropriate controls and security, according to a new report from the Cloud Security Alliance.