SecurityWeek

Silent Circle Launches Enterprise Platform and New Devices Including Blackphone 2 and Blackphone+ Tablet

Some of Seagate’s network-attached storage (NAS) solutions for businesses are plagued by serious vulnerabilities that can be exploited by malicious actors to execute arbitrary code on affected systems, according to researchers.

New age transportation giant Uber said on Friday that a data breach may have allowed malicious actors to gain access to the driver’s license numbers of roughly 50,000 of its drivers. In a statement posted to the company’s website on Friday, Uber said that it had identified a “one-time access of an Uber database” by an unauthorized third party in May 2014.

Organizations that use the IntraVUE network visualization software from Network Vision are advised to update their installations as soon as possible because older versions of the solution are plagued by a critical vulnerability.

Security firm Kaspersky Lab officially announced a new initiative designed to support security startups and provide expertise and advice to foster much needed talent for the IT security industry.

Users can now report accounts that distribute private information on Twitter, the social media giant announced on Thursday.

TalkTalk, a telecommunications and broadband company serving 4.2 million customers in th UK, confirmed this week that it has suffered a data breach, which exposed names, phone numbers, addressees and account numbers of its customers.

Researchers have identified a critical information leakage vulnerability in Jetty, the Web server and Java servlet container maintained by the Eclipse Foundation.

Cybercriminals have been hijacking the Internet connections of users in Brazil by modifying Domain Name System (DNS) settings in their routers, researchers at Proofpoint reported on Thursday.

A steady stream of low-level cyber attacks poses the most likely danger to the United States rather than a potential digital "armageddon," US intelligence director James Clapper said on Thursday. US officials for years have warned of a possible "cyber Pearl Harbor" that could shut down financial networks, poison water supplies or switch off power grids.

The cost of the Target breach keeps on climbing.According to the firm's latest earnings report, the net expense of the breach stands at $162 million. 

Highly aggressive adware has been found hidden in ten Android applications hosted on Google Play, Bitdefender reported.Adware is highly common on both desktop PCs and smartphones. However, the threats discovered by the security firm stand out not just because they are aggressive, but also because they employ clever tricks to stay hidden on the infected device.

Encrypted communications solutions provider Silent Circle said on Thursday that it has agreed to buy out a joint venture that it has with Geeksphone, giving Silent Circle a 100 percent ownership stake in SGP Technologies and full ownership of the privacy and security focused “Blackphone”.

Onapsis, a firm specializing in business-critical application security, has published a total of five advisories detailing vulnerabilities found in enterprise solutions developed by SAP.

Zimperium, a provider of mobile security solutions, today announced that it has closed a Series B round of funding totaling $12 million led by the Ventures group at Australian telecommunications firm Telstra. According to the company, the new funding will be used to support its ongoing expansion and product development and help scale operations.

Advanced Evasion Techniques (AETs) - Dynamic and Constantly Evolving Network Threats

Researchers who discovered and responsibly disclosed vulnerabilities in Facebook last year were awarded a total of $1.3 million, the social media giant said on Wednesday.

Lenovo is the latest high-profile victim of a DNS hijacking attack. Hackers managed to redirect website visitors to an arbitrary page and they intercepted emails sent to Lenovo staff.

Banks could be required to beef up their online password systems under new regulations designed to avert a so-called "cyber 9/11," a top financial regulator said Wednesday.