SecurityWeek

Operational intelligence software provider Splunk has introduced a new application that is designed to help enterprises capture real-time streaming wire data.

There is no shortage of headlines these days detailing breaches, Advanced Persistent Threats (APTs), and other such attention grabbing topics. The details vary in each individual case of course, but most of these stories have one common thread: they all involve malicious code, also known as malware. Amidst all of the headlines, I am concerned that as a security community, we are losing sight of an important principle that is very important to remember: not all intrusions involve malware.

NIST to Develop Cybersecurity Testbed for ICSThe National Institute of Standards and Technology (NIST) is seeking information to build a reconfigurable cybersecurity testbed for industrial control systems (ICS).

The Payment Card Industry (PCI) Security Standards Council has published an information supplement to help organizations that want to achieve or maintain PCI DSS compliance and work efficiently with third-party service providers.

Last week's announcement that a group of cybercriminals reputedly had gotten their hands on 1.2 billion user credentials turned the cyber-world's attention to a subject with whom many people have a love-hate relationship - the password.

Chicago Yacht Club Completes Credit Card Breach Investigation

Google is now using whether a site is leveraging HTTPS as one of the factors in its search ranking.

IBM has made yet another move to expand and enhance its Identity and Access Management (IAM) offerings, today announcing that it has acquired the business operations of Lighthouse Security Group, LLC. 

Multiple vulnerabilities have been identified in Blackphone, the first smartphone developed with security and privacy in mind, a researcher announced on Twitter on Sunday.

A group of security researchers called upon automobile manufacturers to build cyber-security safeguards inside the software systems powering various features in modern cars.

Editor’s Note:

A critical, remotely exploitable vulnerability has been found in a popular WordPress plugin that allows users to easily customize every aspect of the contact forms they embed into their websites.

Director of Kaspersky Lab Global Research & Analysis Team Costin Raiu joins the podcast to discuss the latests discoveries surrounding the Epic Turla cyber-espionage campaign.

Researchers at Bitdefender have been monitoring two new Gameover Zeus variants spotted in the wild and found that most of the computers they have infected are located in the United States and Ukraine.

European security firm Gemalto said on Friday that it has agreed to buy data protection firm SafeNet for $890 million in cash.

Cyber Business Intelligence is Quickly Becoming the “Canary in the Boardroom”

Cybercriminals Steal Cryptocurrency from Mining Pools Via BGP Hijacking Over the course of four months, threat actors managed to make tens of thousands of dollars by redirecting the connections of cryptocurrency miners to mining pools they control, the research team at Dell SecureWorks' Counter Threat Unit reported on Thursday.

Codenomicon, the Finland-based security firm that claimed discovery (along with Google’s Neel Mehta) and branded the Heartbleed bug, has launched a new verification program designed to help critical systems manufacturers test the security and robustness of their products.

Microsoft has two 'critical' bulletins planned for release next week as part of this month's Patch Tuesday update.