SecurityWeek

The attackers behind the recent devastating hack against Sony have leaked what appears to be sensitive personal data on roughly 47,000 individuals, including celebrities, according to a company that has analyzed the files.

NASA's Orion spacecraft was launched today, and it's possible that the microchip containing the names of the 1.3 million individuals who got a boarding pass for the test flight also stores a payload injected by researchers at Germany-based Vulnerability Lab.

VMware has released software updates to address a series of vulnerabilities affecting the company's popular vSphere virtualization platform.

Microsoft is planning to close out the year with seven security bulletins next week for Patch Tuesday.Three of the seven bulletins are rated 'critical' and have to do with vulnerabilities in Windows, Internet Explorer and Microsoft Office.

Cyber risk assessment and data breach services company NetDiligence published a new study on Monday focusing on the costs incurred by insurance underwriters due to cyber incidents.

Researchers at mobile security firm Lookout say they have found malware pre-loaded on mobile devices being sold in Asia and Africa.

A new type of CAPTCHA system introduced by Google is efficient in preventing spam and abuse, and makes it easy for users to verify that they are human, the company announced on Wednesday.

Satisfying the insatiable demand of compliance mandates requiring least privilege (or “need to know”) controls has led to growing need for help. Least privilege governance requirements can be found in all our favorite regulations, such as PCI DSS (Requirement 7), GLBA (section 501b), HIPAA (§164.308 and §164.312), and so on.

Egyptian researcher Yasser Ali has found a way to bypass the cross-site request forgery (CSRF) protection mechanisms implemented by PayPal and take complete control of a user's account.

"Organizations with cyber insurance benefit from a greater peace of mind as well as the opportunity for more effective cybersecurity practices and operational resiliency"

ThreatStream, a security startup that offers a SaaS-based security intelligence platform, today announced that it has raised $22 million in a series B funding round led by General Catalyst Partners.

Researchers from Trend Micro say they have identified the piece of malware that appears to have been used in the recent cyberattack targeting the corporate network of Sony Pictures.

Police in Kenya are holding 77 Chinese nationals accused of running a cyber crime network and mysterious "command center" from upmarket houses in Nairobi, officials and reports said Thursday.

Facebook is teaming with security vendor ESET to improve defenses against malware. The move follows a partnership Facebook announced in May involving F-Secure and Trend Micro.

LOS ANGELES - Sony Pictures denounced Wednesday a "brazen" cyberattack it said netted a "large amount" of confidential information, including movies as well as personnel and business files. But the entertainment giant downplayed a report that North Korea was behind the attack, saying it did not yet know the full extent of the "malicious" security breach.

OpenDNS, the company best known for its DNS service that adds a level of security by monitoring domain name requests, unveiled a new security platform and APIs designed to enable security vendors to integrate with OpenDNS’s network and extend their threat protection across any device in any location.

A major distributed denial-of-service (DDoS) attack was launched on Cyber Monday against a customer of Florida-based DNS provider DNSimple. The attack lasted approximately 12 hours and caused outages to both the company and its customers.

Researchers from the University of Virginia's School of Engineering and Applied Science Department announced the successful testing of new cyber-defenses aimed at protecting unmanned aerial drones.

IBM has released a software update for the company's Endpoint Manager solution to address a vulnerability that can be leveraged by a remote, unauthenticated attacker to execute arbitrary code.

The Google Cloud Platform is now compliant with the Payment Card Industry Data Security Standard (PCI-DSS), the search engine company announced on Tuesday.