SecurityWeek

Malvertising Threats Underscore the Need for an Approach to Security that Addresses the Full Attack Continuum.

Researchers have identified a new method that can be used to bypass the two-factor authentication (2FA) mechanism that is supposed to give PayPal customers an extra layer of protection for their accounts.

SYDNEY - Australian Prime Minister Tony Abbott on Wednesday defended tough new terror laws under which digital data will be retained for up to two years, denying it is an invasion of privacy. The government plans to overhaul laws to make it easier to arrest and prosecute terrorists and make it an offense to travel to designated hotspots overseas without a valid reason.

WASHINGTON - The latest media scoop about the internal workings of the US intelligence community has convinced officials they have a new leaker feeding information to journalists, reports said Tuesday.

BEIJING - A student in China has been detained for selling "intelligence" to foreigners for more than $32,000, state media said Wednesday in the country's latest espionage accusation. The student, surnamed Chang, is an aerospace graduate student at Harbin University in northeast China's Heilongjiang province, according to the official Xinhua news agency.

Vectra Networks, a provider of real-time detection of cyber attacks in progress, today announced that it has received $25 Million in an oversubscribed Series C financing round led by VC firm Accel Partners.

Security solutions vendor Mocana has taken somewhat of a sidestep from its focus as a provider of embedded device and mobile security solutions, and has released what it calls a highly secure drop-in replacement for the widely adopted OpenSSL stack for Apache Web servers.

Cisco released on Tuesday its Midyear Security Report which analyzes threat intelligence and cybersecurity trends for the first half of 2014.

Pre-release notes published by Apple for OS X Mavericks 10.9.5 and Yosemite Developer Preview 5 are informing developers that they might have to re-sign their apps if they don't want Apple's Gatekeeper anti-malware feature to block them.

CrowdStrike, a security firm focused detection and mitigation of targeted attacks, today announced the launch of a new threat intelligence exchange platform that facilitates the access and exchange of threat intelligence between vendor partners.

Target Provides Update on Costs Related to Data Breach 

Bitglass, a Silicon Valley-based provider of enterprise data protection solutions, today announced that it has secured $25 million in a Series B funding round. The new injection of capital brings Bitglass’ total funding to date to $35 million, and will be used to expand sales, marketing and technology development of Bitglass’ data protection solution, the company said.

An Australian security researcher has uncovered a bug that provided him access to an unsecured administration panel for an internal content management system (CMS) used by staff at Yahoo. The issue, which could have reportedly allowed an attacker to gain a foothold into part of the company's network, has been addressed. 

An attack targeting Google Android users in Europe with a new variant of a remote access tool has taken an ironic twist - the malware at the center of it is posing as a legitimate security program. According to McAfee researcher Carlos Castillo, an email spam campaign was spotted in Poland distributing a version of the SandroRat with the name 'Kaspersky_Mobile_Security.apk.

A large number of mobile applications are affected by a series of vulnerabilities in the Android platform of Apache Cordova, researchers at IBM Security Systems reported on Tuesday.

BEIJING - Chinese authorities are investigating two Canadians for alleged espionage, state media reported Tuesday, a week after Canada accused Beijing of "state-sponsored" hacking. "Two Canadian nationals are under investigation for suspected theft of state secrets about China's military and national defense research," the state-run Xinhua news agency said.

Cisco Systems has patched a vulnerability affecting multiple products that could allow an attacker to intercept traffic. The vulnerability involves the Open Shortest Path First (OSPF) Routing Protocol Link State Advertisement (LSA) database.

Mobile app risk management solutions provider Appthority has analyzed 400 of the most popular free and paid applications for Android and iOS devices and presented the results in a report released on Monday.

Researchers at anti-malware solutions provider G Data Software have analyzed a remote administration tool (RAT) that's capable of using popular webmail and other types of services for command and control (C&C) communications.