SecurityWeek

Security Researcher Explains How Vulnerable Hypervisors Put Enterprises At RiskHypervisors have become an important part of enterprise environments and while they should normally reduce the attack surface, experts warn that they can be plagued by security vulnerabilities that could be leveraged by malicious actors.

In a move to bolster the security of its massive global server network, Facebook announced on Thursday it was acquiring Palo Alto, California-based cybersecurity startup PrivateCore.

Today at the Black Hat security conference in Las Vegas, a researcher demonstrated how weaknesses in email and Web filtering solutions can be leveraged by attackers to gather valuable information which they can use in their operations.

As the saying goes, a chain is only as strong as its weakest link. And in the technology world, while encryption is an instrumental component in protecting sensitive data, encryption is only as strong as its key management.

A large number of Android devices in China were infected with an SMS worm on August 2, the day the country celebrated Valentine's Day. The creator of this piece of malware has already been identified and detained, according to reports.

In an effort to provide an enhanced level of protection to Internet Explorer users, Microsoft has decided to introduce a new feature that's designed to block ActiveX controls that are out of date, the company announced on Wednesday.

Kaspersky Lab said that it has discovered how victims of an ongoing massive cyber espionage campaign were infected, shedding light on questions previously left unanswered in earlier research.

Threat protection solutions provider FireEye has announced a new line of services designed specifically to help brokers and underwriters gain visibility into enterprises' exposure to cyber threats.

For the first time ever, the security teams at Drupal and WordPress have worked together on addressing a remotely exploitable vulnerability that affects tens of millions of websites that use their publishing platforms.

US Investigations Services (USIS), a Department of Homeland Security (DHS) contractor that conducts background checks for the agency, has been the target of a cyberattack that appears to have been launched by a state-sponsored entity.

MOSCOW - Fugitive US intelligence operative Edward Snowden has been granted a three-year residence permit in Russia, his Russian lawyer said at a press conference Thursday.

KHARTOUM - For the second time in a month, hackers have attacked a Sudanese website close to the country's powerful security apparatus, AFP learned on Thursday. The website of the Sudanese Media Centre (SMC), http://smc.sd, was inaccessible and carried the message: "hacked again by 7r9 al7dod".

Researchers at FireEye have examined a new campaign in which advanced persistent threat (APT) actors used some clever techniques to avoid being detected.

Pwn Pulse Combines “Hack-in-a-box” Sensors with Central Management for Remote Location Intelligence

Just weeks after announcing that it had raised $40 million in a new round of equity financing, SIEM and security intelligence vendor LogRhythm has released a new analytics suite that monitors honeypots in order to detect and track would-be attackers.

Security research firm NSS Labs has introduced a new SaaS offering designed to help organizations with managing their cyber risk.

Lookingglass Cyber Solutions, a provider of cyber threat intelligence management solutions, has released a new solution designed to help organizations correlate threat intelligence feeds with network telemetry in order to generate actionable threat reports across businesses globally.

A network-attached storage (NAS) vendor has confirmed that ransomware is targeting some of its devices and urged users to upgrade. 

FireEye and Fox-IT have teamed up to provide a new service to assist users whose computers have been infected with the notorious CryptoLocker ransomware.