SecurityWeek

Ottawa - Canada's electronic eavesdropping agency has amassed a huge trove of emails sent to the government, as part of its cybersecurity mandate, according to a leaked secret document Wednesday. And their retention by the Canadian Security Establishment (CSE) for days, months or years in some cases, is worrying privacy advocates.

Researchers at Microsoft, AnubisNetworks and Symantec joined forces with law enforcement to deliver a body blow to the Ramnit botnet.

ForeScout Technologies, a provider of continuous monitoring and mitigation solutions, announced on Wednesday that it has named veteran security industry executive Michael P. DeCesare as its new chief executive officer.

Google has decided to ditch single-day Pwnium competitions in favor of a year-round program that gives researchers the opportunity to get considerable rewards for hacking Chromium.

In the preceding episode we looked at some stock charts that illustrate change in value over time. A time/value series is the metric you will probably want to present most frequently, because what we're doing in security is deeply connected to events in time. It has the wonderful property of leveraging your eye and brain in a way that makes it immediately comprehensible.

Hackers are exploiting a known vulnerability in a Google Maps plugin for Joomla to launch distributed denial-of-service attacks against enterprises. According to Akamai Technologies' Prolexic Security Engineering and Response Team (PLXsert), the vulnerability allows attackers to turn Joomla servers using the plugin into proxies for their attacks. 

WordPress website administrators who use the WP Slimstat Web analytics plugin are advised to update the application as soon as possible. The plugin is plagued by a serious vulnerability that can be exploited to hack into a site’s database.

A vulnerability has been found in the Device Type Manager (DTM) component used by Schneider Electric in some of the company’s Invensys SRD Control Valve Positioners.

European SIM maker Gemalto said Wednesday it had suffered hacking attacks that may have been conducted by US and British intelligence agencies but denied any "massive theft" of encryption keys that could be used to spy on conversations.

The increasing severity and volume of cyber-attacks has motivated many organizations to improve and pay particular attention to security risk management.

A total of 17 security holes have been addressed by Mozilla with the release of Firefox 36. The latest version of the Web browser also includes support for the HTTP/2 protocol.While the number of fixed vulnerabilities is higher than usual, only four of the flaws have been rated critical.

U.S. Offers $3 Million Reward for Russian Sought in Bank HackWashington - The United States on Tuesday offered a $3 million reward for information to apprehend a Russian national sought in a major hacking enterprise that stole some $100 million.

Intel Security's McAfee Labs is reporting that the vast majority of the most popular mobile apps found to be vulnerable to man-in-the-middle attacks (MitM) attacks in research performed last year remain exposed to attacks.

Google has taken further steps to protect Internet users against malicious websites by expanding its Safe Browsing efforts in Chrome and search.

The developers of PrivDog released an update for the application on Monday after researchers discovered that it failed to validate SSL certificates.

Recently, at an event in Las Vegas, one of the speakers polled the audience.  When he asked the question, “How many people lost money gambling?”, about 90% of the hands in the room went up.  When he asked the question, “How many people won money gambling?”, about 10% of the hands in the room went up.  To anyone who understands basic probability and the busin

Attackers are doing a better job at hiding in the most complex parts of computer operating systems, according to a new report from FireEye-owned Mandiant.

Samba, the Windows interoperability suite of programs for Linux and Unix, is plagued by a serious vulnerability that can be exploited for arbitrary code execution.The unexpected code execution flaw (CVE-2015-0240) has been found in the smbd file server daemon and it affects Samba versions 3.5.0 through 4.2.0rc4.

Security firm Avast announced on Monday the availability of a free offering designed to help small and medium businesses (SMBs) protect their networks against malicious attacks.

Google’s Vietnam domain (google.com.vn) was hijacked on Monday by hackers apparently associated with the notorious Lizard Squad group.