SecurityWeek

WASHINGTON - US officials announced Thursday that companies sharing information about cybersecurity would not face prosecution on antitrust grounds. The news came amid heightened concerns about data breaches and malware that can foil online encryption to allow hackers to steal passwords or other personal data.

Google is enhancing security for Android users to make sure installed apps are running safely and not performing malicious actions.

A new study by Enterprise Management Associates (EMA) indicates more than half of enterprise employees may not receive any security awareness training.

Mandiant Releases Annual Threat Report Analyzing Advanced Targeted Attacks

A flaw buried deep inside a widely used cryptographic library has serious implications for Internet security. It's very likely criminals may have had access to the sensitive data that was supposed to be protected in the first place.

Researchers at security firm High-Tech Bridge uncovered a critical SQL injection vulnerability in a popular ad server.The issue, which affects Orbit Open Ad Server version 1.1.0 and possibly previous versions, has been patched by OrbitScripts. Those users who have not applied it however are leaving themselves susceptible to a potentially serious vulnerability.

Intel's McAfee security division offered some details today about its strategy for protecting the Internet of Things as the number of connected devices continues to grow.

Flaw Plugs Canada Tax Filing Website at Crunch Time OTTAWA - Canada's tax agency shuttered its website Wednesday after warning that encrypted taxpayer data could be vulnerable to the "Heartbleed" bug.

BERLIN - The chairman of a new German parliamentary panel probing mass surveillance by the NSA abruptly quit on Wednesday, rejecting opposition demands that the body question fugitive US intelligence leaker Edward Snowden.

BlackBerry Patches Remote Code Execution Vulnerability in qconnDoor Service

According to Gartner ("Security and Risk Management Scenario Planning, 2020"), by 2020, 30% of global 2000 companies will have been directly compromised by an independent group of cyber activists or cyber criminals. This prediction is not surprising, considering the fact that leading risk indicators are difficult to identify when the organization's cyber foes, including their strategy, competences, and actions, are unknown.

Some of the most sophisticated attacks don't start with malware; instead, they start with a spear phishing email.

Telecommunications giant AT&T announced on Tuesday that it is offering a new cloud-based security solution designed to protect customers against malware and malicious websites while offering security policy control across enterprise, web, social and mobile networks.

Microsoft pushed out critical patches for Microsoft Office and Internet Explorer today as the company closed the door on support for Windows XP.

STRASBOURG - Fugitive US intelligence contractor Edward Snowden said on Tuesday there should be an international agreement on data collection to protect against the mass surveillance of citizens.

Website owners should move quickly to patch a critical vulnerability (CVE-2014-0160) in the OpenSSL cryptographic software library.

Entrust IdentityGuard Simplifies Management of SSL, PKI, Certificate Discovery, Device Certificates and Credentialing