SecurityWeek

What is old may not always be new, but when it comes to hacking, it's still effective.

Washington - The National Security Agency chief said Monday intelligence services need access to encrypted devices to thwart terrorism, and hopes to find common ground with the tech sector on the issue.

Cisco Fixes DoS Vulnerability in IOS XR SoftwareCisco has released software updates to address a denial-of-service (DoS) vulnerability in IOS XR Software, a self-healing and fully distributed network operating system designed for service providers.

The Telegram messaging app has security holes that allows attackers to get a peak at users' messages by bypassing encryption, according mobile security firm Zimperium.

Symantec customers started flooding the company’s Norton Community forum on Friday with posts about an update that caused the Internet Explorer web browser to crash.

Sqrrl, a Cambridge, Mass.-based big data analytics startup, announced that it has secured $7 million in a Series B founding round. The Series B funding was led by Rally Ventures and with participation by existing investors, Atlas Venture and Matrix Partners.

The controversial SSL interception library used by the Superfish software installed recently on Lenovo laptops can be found in at least a dozen other applications, researchers have determined.

It would be another powerful tool in the arsenal of US and British spy services: encryption keys for a large share of the SIM cards used for mobile phones.

For a period of several months, Lenovo shipped numerous laptop models with a piece of adware that broke HTTPS browsing and put users at risk. Now, the company has apologized to customers and provided them with instructions on how to remove the application.

A new piece of Android malware can perform a wide range of actions on infected phones without being detected by making it look like the device is turned off.

Researchers have obtained samples of what appears to be Babar, a nation state espionage malware believed to have been developed and used by a French intelligence agency.

My youngest daughter has single-handedly held up one end of the Forth Bridge in Edinburgh, Scotland. My son? He’s been photographed kicking over the “Heel Stone” at Stonehenge. I myself was captured in Kiev, Ukraine back in the 90s holding the Motherland Monument in the palm of my hand. That thing is all steel and over 200 feet tall!

Pindrop Security, a startup focused on combating phone-based fraud, announced this week that it has raised $35 million in a Series B round of financing.

The Internet Systems Consortium (ISC) has released security updates to address a medium-severity vulnerability in BIND, the most widely used Domain Name System (DNS) software.

Lenovo has apologized to customers for preinstalling Superfish software on their computers. The company has published instructions for removing both the app and the root certificate used for traffic interception.

Synack, a startup that has built a platform for crowdsourced security testing, announced on Thursday that it has raised $25 million in Series B funding co-led by GGV Capital and Icon Ventures. 

Distributed denial-of-service attackers are making it relatively cheap to disrupt targeted sites, according to a new report from Verisign. According to Verisign's latest Distributed Denial of Service Trends report, attacks can cost between $5 (USD) per hour or as low as $2 (USD) an hour. In addition, massive and longstanding attacks can be launched for as little as $800 a month.

US and British intelligence services can tap into mobile voice and data communications of many devices after stealing encryption keys of a major SIM card maker, a report said Thursday.

Researchers at FireEye revealed more information about how attackers can compromise iOS devices.