SecurityWeek

Researchers at Bitdefender have conducted some experiments to find out just how difficult it is for a hacker to intercept the data sent between smartphones and smartwatches.

Microsoft now allows Internet Explorer 11 users to disable fallback to SSL 3.0 in an effort to protect them against attacks leveraging the recently disclosed vulnerability known as Padding Oracle On Downgraded Legacy Encryption (POODLE).

Nearly two years after the Red October cyber espionage operation was exposed, researchers have spotted a new advanced persistent threat (APT) campaign that appears to represent the return of the Red October group.

Cyber crime is a serious threat to safety in the skies, aviation industry heavyweights said Wednesday, vowing to fight the growing scourge before it causes a catastrophic incident. Hackers, cyber criminals and other "terrorists" are stealing information but in a worst-case scenario could endanger lives by tampering with airline systems.

Cisco Systems said on Wednesday that it would acquire privately held Neohapsis, a Chicago-based security advisory company providing information security, risk management, and compliance services, with a focus on cloud and mobile solutions.

Yahoo says it will publicly disclose any new vulnerabilities uncovered by its security team within 90 days.

Area 1 Security, a stealth cybersecurity startup on a mission to “eliminate targeted and advanced social engineering attacks,” today announced it has raised $8 million in a Series A funding round led by Ted Schlein at Kleiner Perkins Caufield & Byers (KPCB).

Vectra Networks has made some improvements to its real-time threat detection platform to help organizations protect their networks against insiders and targeted attacks.

Researchers at Blue Coat Systems have identified a stealthy cyber-espionage framework that has been used to target organizations around the world.

VMware said on Wednesday that is has released an update to its AirWatch enterprise mobile management and security platform to address information disclosure vulnerabilities that could leak sensitive IT-related organizational information.

Canada-based Trihedral Engineering Ltd. has released software updates to address a security vulnerability that can be leveraged to cause VTScada servers to crash.

Researchers have uncovered several vulnerabilities in the admin panel of InfiniteWP, a free application that allows WordPress website administrators to control multiple installations from a single dashboard.

Recursive Domain Name System (DNS) resolvers are plagued by a vulnerability that can be leveraged to cause them to crash due to resource exhaustion, the CERT Coordination Center at Carnegie Mellon University (CERT/CC) reported on Tuesday.

A digital certificate stolen from Sony Pictures under the recent high-profile cyber attack has been used to sign malware, according to a report from Kaspersky Lab.

Belden Inc. announced on Tuesday that it has signed a definitive agreement to acquire Tripwire, a provider of IT security and compliance solutions, for $710 million in cash.

Online advertisers are losing billions – not to rival advertisers, but to bots.

Network security firm Fortinet has launched four new “Rugged” products that the company said were purpose-built to meet the demanding standards of public utilities, oil and gas, mining, manufacturing and the transportation industries that operate in harsh physical environments.

In my previous column, I expressed the hope that the Operational Technology (OT) security community will move away from pushing an IT compliance security model in the world of OT.

Microsoft released seven security bulletins today to address 24 vulnerabilities, including critical updates for Internet Explorer, Windows and Microsoft Office.