SecurityWeek

BERLIN - US intelligence has stepped up eavesdropping on hundreds of key figures in Germany, including a government minister, after Chancellor Angela Merkel was dropped as a direct target, a German report said Sunday.

In the world of security, these types of announcements don’t happen often. While still bad news, the recently-disclosed data breach at Neiman Marcus has impacted fewer customers than the company first thought.

Mocana, a provider of security solutions for embedded and mobile devices, has introduced a new appliance designed to simplify and secure enterprise mobile app deployments.

Colombia's Santos Says Thousands of His Emails Hacked BOGOTA  - Colombian President Juan Manuel Santos confirmed Sunday that more than a thousand of his personal emails had been hacked, saying unknown parties were trying to slander him as he seeks another term.

In an effort to enhance its secure enterprise mobility offerings, Good Technology announced on Sunday that it has signed a definitive agreement to acquire Columbia, Maryland-based BoxTone, another provider enterprise mobile management solutions.

ISTANBUL - Turkey's spy agency eavesdrops on more than two thousand people, mostly foreigners, the deputy prime minister said on Saturday as parliament debated controversial new espionage powers. "As of today, National Intelligence Organisation (MIT) eavesdrops on 2,473 people. More than half of them are foreigners," Besir Atalay told reporters in Ankara.

WASHINGTON - The Facebook deal for WhatsApp drew attention for its whopping price tag, but has also brought out fresh criticism over security for the billions of messages delivered on the platform.

iOS SSL Validation Flaw Enables Man-in-the-Middle Attacks

Google announced on Friday it has acquired UK startup spider.io for its technology used in the fight against online advertising fraud.According to Google, the spider.io team has spent the past 3 years building a “world-class ad fraud fighting operation” that the search giant plans to integrate into its products. 

Attacks against medical devices and critical health care systems are no longer theoretical. In fact, according to a report from the SANS Institute, poorly protected health care systems are not able to fight off the barrage of attacks.

Don’t Assume Systems Are Secure Because They are Running Linux - Administrators Must Make Them Secure.

I recently attended an online webcast on "defense in depth." The presenter alternated the term with the catchphrase "layered approach." Of course, I was highly disappointed when the speaker made it sound like this was something new. Well, maybe the concept of putting a Web Application Firewall (WAF) in front of your web-facing app is new, but, personally, I find the idea that someone would call "defense in depth" new is actually laughable.

Risk I/O, a vulnerability intelligence platform designed to help organizations report and mitigate security vulnerabilities, has released the latest version of its SaaS-based vulnerability threat management platform.

CloudLock, a Waltham, Massachusetts-based firm that helps companies secure data stored in the cloud, announced the launch of CloudLock Selective Encryption, a new cloud-based encryption solution that enables enterprises to protect data stored across multiple SaaS and public cloud platforms.

Pindrop Security, a startup focused on combating phone-based fraud, today announced the latest version of its flagship Fraud Detection System (FDS), which adds voice biometrics to its “Phoneprinting” technology.

Blackstone, Khosla Ventures, Fairhaven Capital and Private Investors Put $20 Million into Series B Funding Round

Adobe Systems issued critical security updates today to address vulnerabilities in Adobe Flash Player - including one vulnerability that is under attack.

Microsoft issued a fix-it tool to help users address a security vulnerability targeted in attacks against Internet Explorer 10.

CrowdStrike, a provider of security solutions for identifying advanced threats and targeted attacks, announced the availability of Endpoint Activity Monitoring (EAM), an application on the CrowdStrike Falcon Platform that helps customers gain real-time insight into attacks and explore the rich “Stateful Execution Inspection” (SEI) data collected by sensors.

McAfee has shared details on a soon to be released threat sharing platform designed to help security teams develop and customize a threat intelligence solution from global data sources. McAfee, a wholly owned subsidiary of Intel, says the solution provides new approaches for answering increasingly urgent problems customers face more often as targeted attacks increase.