SecurityWeek

The Heartbleed vulnerability is still leaking the security out of the Internet. A scan of the Internet by Errata Security turned about 300,000 servers still vulnerable to the flaw. The number is half as many as the firm discovered when it did a similar scan in April, but is evidence nonetheless that many sites are falling behind when it comes to patching.

Information security firm Dataguise has released new solution that enables organizations to easily declare policies, discover sensitive data, view and track entitlements, and audit access to sensitive data across transactional databases, data warehouses, file shares, Apache Hadoop, and other Big Data sources.

Security vendor Fortinet released a survey that shows homeowners want to embrace the Internet of Things (IoT), but are worried about privacy and security.

Triumfant, a provider endpoint-focused security monitoring solutions, today announced its support for Mac OS X. Announced at the Gartner Security & Risk Management Summit, the new endpoint security agent provides real-time detection and automatic remediation of malware and other sophisticated attacks occurring in-memory or on a hard drive, the company said.

Systems and security management company Tanium announced on Sunday that it has secured a massive $90 million in funding from Silicon Valley VC firm Andreessen Horowitz.

Microsoft has launched a limited preview of a new security and threat information exchange platform that enables users to set up their own independent threat sharing communities to exchange information such as suspected malicious URLs or IP addresses and analysis of malware.

WASHINGTON, June 20, 2014 (AFP) - The US House of Representatives approved late Thursday a bill that would restrict the electronic surveillance powers of the National Security Agency (NSA). The margin was wide, 293 to 123, for the bill attached to the defense budget for 2015, which begins October 1.

Growing up, one of my father’s favorite sayings was “luck favors the prepared.”

Businesses that handle payment card data have to become compliant with the Payment Card Industry Data Security Standard 3.0 (PCI DSS 3.0) by December 31, 2014, yet many appear to be unprepared for the challenge.

LinkedIn said that a majority of its users are not affected by the SSL issue reported by security company Zimperium. According to Zimperium, an attacker could launch a man-in-the-middle [MITM] attack leveraging a SSL stripping technique to steal a user's credentials and gain control of a victim's account due to the way LinkedIn implements SSL.

The breach at P.F. Chang's China Bistro may have stretched on longer than some thought. According to reports, the breach may go back as far as September 2013, roughly nine months before it was first discovered. 

The FBI has arrested a 20-year-old Tennessee man reputed to be a member of the notorious NullCrew hacking group.Timothy Justin French was arrested recently by the FBI at his home in Morristown, Tennessee, on charges of conspiring to launch attacks against two universities and three companies since last summer.

Suits and Spooks NY at the Dream Downtown hotel

Tech giant IBM announced on Wednesday that it has officially opened a new Security Operations Center (SOC) located in Heredia, Costa Rica.

Imitation is the highest form of flattery, as the saying goes. In the world of cyber-crime however, it may be more accurate to say imitation is about achieving the highest form of effectiveness.

Until We Know What is Occurring on Devices, We Cannot Determine if Our Controls are Effective at Managing Risk...

The World Cup kicked off last Thursday, marking the beginning point of more than a month of futbol hysteria. The World Cup is the most watched event on the planet and the runner up isn’t even close.

Onapsis, a provider of security solutions to protect SAP and Oracle platforms, announced that it has raised $9.58 million in funding led by .406 Ventures with Endeavor Catalyst and existing investors also participating.

Microsoft Releases Security Advisory for Microsoft Malware Protection Engine