SecurityWeek

Securing Apache Hadoop - How Enterprises Can Pass Internal and External Security Requirements and Audits

Researchers at Offensive Security, the company that develops and maintains Kali Linux, have once again managed to disable the protection mechanisms provided by Microsoft's Enhanced Mitigation Experience Toolkit (EMET).

Flaw in Schneider Electric Web HMI Allows Authentication BypassThe U.S. Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) published an advisory this week to warn organizations of a directory traversal vulnerability affecting several products developed by energy management solutions company Schneider Electric.

Joining several major tech companies, VMware has started rolling out software updates that address the recently discovered GNU Bash vulnerability dubbed ShellShock.

A serious security vulnerability (CVE-2014-7188) affecting the open-source hypervisor Xen has forced Amazon, Rackspace and other cloud providers to reboot their systems in order to apply a patch.

Putin Says Will Boost Internet Security Without 'Total Control'MOSCOW - President Vladimir Putin on Wednesday said he would not impose total control over the Internet, despite sweeping government moves to impose surveillance and crack down on dissent.

The U.S. Food and Drug Administration (FDA) released a set of recommendations for manufacturers for managing cyber-security risks and protecting patient health and information. 

The European Cybercrime Center (EC3) at Europol has published its Internet Organised Crime Threat Assessment (iOCTA) for 2014. The role of the report is to keep decision makers informed on the cybercrime threats affecting governments, businesses and citizens in the European Union.

As thousands of people gather on the streets of Hong Kong demanding democratic elections, security researchers have uncovered two pieces of mobile malware appearing to be used by the Chinese government to keep a close eye on pro-democracy protesters.

Since it is becoming more difficult to find serious vulnerabilities in Chrome, Google has decided to increase the amount of money it pays to researchers who contribute to making the Web browser more secure.

The open source virtual private network solution OpenVPN is reportedly affected by the notorious GNU Bash vulnerability dubbed ShellShock, a researcher revealed on Tuesday.

Twitter is a popular way for millions of people to connect online. It is also a popular way for attackers to spread malicious content. In a new paper, researchers at Trend Micro revealed the results of analyzing more than a half a billion tweets. The company found that millions of the messages linked to material ranging from phishing pages to malware.

Intel announced on Tuesday that it has hired Christopher Young as the company’s newest senior vice president and general manager of Intel Security. Young will report to Intel President Renée James and lead Intel's security business, including McAfee and Intel's other security assets, which generate revenue topping $3 billion.

What is it about the human spirit that makes us fascinated with mobility? We don’t sit still very much anymore. We travel across the globe for an important meeting, even though the technology exists to telecommute. We vacation far from home to “get away from it all.”

There may have been a decline in distributed denial-of-service attacks during the second quarter of 2014, but the private sector saw very little respite, according to a new report from Akamai Technologies.

Hackers Charged in Software Theft from U.S. Army, Others - [UPDATE]SAN FRANCISCO - Four members of an international hacking ring were charged with cracking the networks of the US Army and developers of blockbuster war video games to steal software, prosecutors said Tuesday.

The chief executive of a company that develops and sells spying software for mobile devices has been indicted in the Eastern District of Virginia in what's said to be the first-ever criminal case involving the advertisement and sale of mobile spyware.  

The team behind the open-source WordPress vulnerability scanner WPScan has launched a database containing information on numerous known security holes affecting WordPress.

Supermarket chains Supervalu and Albertson's revealed on Monday that some of their payment processing systems have once again been breached.

Enterprise network security firm Palo Alto Networks today announced the availability of a new security solution designed to prevent sophisticated cyber attacks targeting endpoints.