SecurityWeek

Zscaler today announced the availability of a new version of the its cloud-based Internet security platform, which now provides protection against advanced persistent threats (APT).

BAE Systems has entered into a definitive agreement to acquire Perimeter Internetworking Corp., which trades as SilverSky, for $232.5 million.

Imagine, for a moment, that an engineer in a government acquisitions program office is given the responsibility for designing the next generation of cruisers for the US Navy. Specifications for the hull, the machinery, the weapons, the navigation system, the damage control systems and the radars are carefully drawn up. His next focus is the ship’s propulsion system.

The Chinese government has started launching cyberattacks against Apple customers just as the company announced the availability of the latest iPhone in the country, an anti-censorship organization reported on Monday.

Cisco has been analyzing its products to determine which of them are affected by the recently disclosed Secure Sockets Layer (SSL) version 3 protocol flaw dubbed Padding Oracle On Downgraded Legacy Encryption (POODLE).

In an effort to ensure that its advertising system is not plagued by any security bugs, Facebook has decided to double the amount of money it awards to researchers who identify vulnerabilities in the social media network's ads code.

 The Securities Industry and Financial Markets Association [SIFMA] is proposing the formation of a working group of government agenies to review cybersecurity guidance and regulations related to the financial industry.

PHP released last week versions 5.6.2, 5.5.18 and 5.4.34 of the scripting language. In addition to some functionality bugs, the latest releases address a series of security-related flaws.According to the PHP development team, a total of four vulnerabilities have been fixed in PHP 5.6 and PHP 5.5, and six flaws in PHP 5.4.

Security updates released by Apple last week address a series of vulnerabilities, including the recently uncovered SSL 3.0 flaw (CVE-2014-3566) that can be leveraged to obtain potentially sensitive information from encrypted communications.

Researchers at Trend Micro say the Sandworm team may have their eyes set on compromising SCADA-based systems.

AMSTERDAM - BLACK HAT EUROPE - Researchers have found a way to trick Android users into executing potentially malicious applications by hiding them inside innocent-looking image files.

WASHINGTON - US President Barack Obama on Friday ordered "pin and chip" security measures for government payment systems, aiming to stem the proliferation of credit card fraud and identity theft.

WASHINGTON - FBI chief James Comey renewed a call Thursday for broader authority to tap into emerging technologies, saying the Edward Snowden revelations have led to unwarranted mistrust of law enforcement.

AMSTERDAM - BLACK HAT EUROPE - Researchers have found that the components of a specification designed to ease the management of industrial control systems (ICS) contains serious vulnerabilities.

AMSTERDAM - BLACK HAT EUROPE - A researcher has discovered a new attack method that could potentially impact many of the world's largest websites. One site confirmed by the researcher as being vulnerable was Google+, which was just patched just a couple of days ago.

Researchers at Akamai Technologies have issued a warning about a spate of distributed denial-of-service attacks being launched via Universal Plug and Play (UPnP) devices.

WASHINGTON - Cybercrime costs are escalating for US companies and attacks are becoming more complicated to resolve, a study showed Wednesday. A survey of 59 US firms by the Ponemon Institute with Hewlett-Packard found the average annual cost of responding to cyber attacks was $12.7 million, up 96 percent over the previous five years.

A critical SQL injection bug has been patched in Drupal, and users are being advised to upgrade as soon as possible. The vulnerability exists in all Drupal core 7.x versions up to the just-released 7.32 version, which fixes the issue.

Researchers have disclosed a design flaw (CVE-2014-3566) in SSL 3.0 which lets attackers extract session cookies and other secrets from encrypted online communications.