SecurityWeek

With just a few days until the New England Patriots face the Seattle Seahawks in Super Bowl XLIX, researchers warn that at least one of the official National Football League (NFL) mobile applications is plagued by serious vulnerabilities that expose users’ personal information.

Researchers reported earlier this month that Google was no longer patching vulnerabilities affecting the WebView component in Android Jelly Bean (4.3) and prior. The search giant has motivated its decision by saying that it’s no longer practical to apply patches to old branches.

Facebook, the world's most popular social network, and its Instagram photo-sharing site were interrupted temporarily Tuesday, provoking panic, rumours of a hack, and jokes of how more than one billion users were struggling to cope. "This was not the result of a third party attack," Facebook said in a statement after its services were restored. 

Symantec has published a new whitepaper detailing the activities of a threat group dubbed by the security firm “Waterbug.”

PFP Cybersecurity Launches Physics-Based Solution to Protect SCADA Systems and Supply Chains

It’s okay to fail. This may sound radical, but I would argue that the information security community isn’t failing enough. Or rather, we as a community are failing passively on a continual basis, rather than failing actively. The difference between passive and active failing is key. Allow me to elaborate.

While there have increasingly been many predictions about the impact the Internet of Things (IoT) will have on organizations in the future, it appears that the number of non-traditional devices connected to corporate networks is already challenging enterprises.

The NSA's Information Assurance Directorate (IAD) issued a report this month laying out best practices for combating malware designed to steal or destroy corporate data.

The head of the CIA's secret intelligence operations plans to step down just as the spy agency weighs an unprecedented shake-up of the organization, officials said Monday. The chief of the spy service's clandestine arm "has announced that he soon plans to retire from the agency after a long and distinguished career at CIA," agency spokesman Dean Boyd told AFP.

The vulnerabilities disclosed last week by Google and the Thunderstrike flaw detailed in December by a researcher have been reportedly fixed by Apple in OS X Yosemite 10.10.2 beta.

Survey Examines Impact Data Breaches at Target and other Organizations Have had on IT Budgets and Security Practices. Organizations are increasing investment in IT security, but even after a string of high profile data breaches in 2014, they aren't thinking beyond perimeter-based defenses, according to the latest Ponemon Institute survey.

Up until last week, it was easy for a malicious hacker to gain access to the reservations and personal details of Marriott customers by leveraging a vulnerability in the hotel chain’s official mobile application.

Several security vulnerabilities affecting PHP were addressed last week with the release of versions 5.6.5, 5.5.21 and 5.4.37.One of the flaws, an out-of-bounds read (CVE-2014-9427) that crashes php-cgi, was reported by Brian Carpenter.

London - WikiLeaks on Monday accused Internet giant Google of handing over the emails and electronic data of its senior staff to the US authorities, and not notifying them for almost three years.

Russia-based dating website Topface says it’s investigating reports that the details of 20 million users have been stolen by hackers.

Adobe updated Flash Player over the weekend to fix the second zero-day vulnerability (CVE-2015-0311) reported last week. The patch was initially announced for this week, but the company released it ahead of schedule.

Davos, Switzerland - Attacks on power plants, telecommunications and financial systems, even turning all of Los Angeles' traffic lights green: Davos elites were warned Saturday of the terrifying possibilities of modern cyber terrorism.

US spies intercepted communications between the chief suspects in the murder case of Russian former spy Alexander Litvinenko, linking his poisoning to the Russian state, Britain's Daily Telegraph reported Saturday.

Malicious actors could theoretically shut down more than 5,300 gas stations in the United States because the automatic tank gauges (ATGs) used to monitor fuel tanks are easily accessible via the Internet.