SecurityWeek

LibreSSL, the open-source implementation of the SSL/TLS protocol forked from OpenSSL, is unsafe on Linux due to a flaw in the pseudorandom number generator (PRNG), a researcher said this week. However, the OpenBSD Project, which develops LibreSSL, believes the issue has been overblown.

Swiss security website Abuse.ch announced the creation of a blacklist containing SSL certificates that are known to be associated with malware and botnet activities such as command and control (C&C) traffic.

Oracle has addressed a total of 113 security vulnerabilities across its product base with the release of its Critical Patch Update (CPU) for July 2014.

A new report from ForeScout Technologies described a challenging world for IT security - one where one in six IT pros say their organization has had five or more significant security incidents in the past year.

A recently discovered vulnerability in WPtouch, a popular plugin that's used to create simple themes for the mobile visitors of WordPress websites, can be leveraged by an attacker to upload PHP files to impacted servers, Sucuri reported on Monday.

A vulnerability in Microsoft's Active Directory service can be exploited by an attacker to change a targeted user's password, Active Directory protection solutions provider Aorato reported.

Venture capital firm Bain Capital Ventures (BCV), announced on Tuesday that Enrique Salem has joined the firm as a Managing Director based in its Palo Alto office.

Google has long had a team of dedicated security researchers looking for security weaknesses in its own products and occasionally other popular software used widely across the Internet, but the company has announced a new initiative in an effort to make the Internet more secure for all.

Oracle has clarified that future security patches for Java 7 will still work on Windows XP, but pointed out that it can no longer provide "complete guarantees" for the software because the operating systems is no longer supported by Microsoft.

Following the recent issues surrounding encryption and encryption tools, some organizations are turning to Bring-Your-Own-Encryption (BYOE), but experts warn that there are some aspects that need to be take into consideration before making the move.

Network security solutions provider Fortinet announced on Monday that it has introduced a new on-demand, pay-as-you-go offering for its FortiWeb-VM Web Application Firewalls (WAFs) for Amazon Web Services (AWS).

WASHINGTON - The fast-growing anonymous mobile app Secret said Monday it had raised $25 million in venture capital and would expand as a social network connecting Facebook friends.

New research from Unisys and the Ponemon Institute underscores that many critical infrastructure companies remain challenged when it comes to security.

Security Startup Speed Lunch DC

Oracle plans to issue a massive security update Tuesday that addresses 113 vulnerabilities.

MOSCOW - Russian President Vladimir Putin on Friday condemned the "hypocrisy" of Western countries who use cyber-espionage to eavesdrop on leaders, and called for an international campaign to combat the problem.

The developers of the popular password manager LastPass informed users on Friday of security vulnerabilities reported to the company last year.

In Physics, the event horizon of a black hole is the point at which the black hole’s gravitational pull becomes so great that nothing can escape – not even light. In other words, the black hole’s event horizon is essentially a “point of no return” that, once crossed, can never be crossed in the reverse direction.

Malware developers have recently started advertising a new banking Trojan on a Russian cybercrime forum, researchers from Trusteer reported on Friday.