SecurityWeek

Cisco’s Talos threat intelligence and research group has released information on a recently addressed vulnerability in Firefox that could be exploited for code execution.

More than a dozen U.S. officials have sent a letter to California-based networking and cybersecurity solutions provider Juniper Networks to ask the company about the results of the investigation launched in 2015 following the discovery of a backdoor in its products.

At least a dozen bogus "contact tracing" apps designed to look like official software to track coronavirus infections have been deployed globally to spread malware and steal user data, security researchers said Wednesday.

One of the vulnerabilities that Microsoft addressed on June 2020 Patch Tuesday is a Server Message Block (SMB) protocol bug that could allow an attacker to leak kernel memory remotely, without authentication.

The Right Attitude Goes a Long Way Towards Helping Stakeholders Regain Confidence in the Security Team

SAP this week released its June 2020 security patches, which address 19 vulnerabilities across the company’s product portfolio, including two rated critical.

VMware this week informed customers that it has patched a high-severity information disclosure vulnerability affecting its Workstation, Fusion and vSphere virtualization products.

More Data May be Lost Through Misconfigured Public Cloud Databases Than We Are Led to Believe

Researchers have disclosed the details of a new speculative execution attack affecting many Intel processors, and they say this is the first vulnerability of this kind that allows hackers to obtain sensitive information across the cores of a CPU.

The Defense Advanced Research Projects Agency (DARPA) is running a bug bounty program in an effort to find security vulnerabilities in a new, advanced implementation of the System Security Integration Through Hardware and Firmware (SSITH) program.

Microsoft’s security updates for June 2020 patch 129 vulnerabilities, including 11 critical remote code execution flaws affecting Windows, the Edge and Internet Explorer browsers, and SharePoint.

Japanese gaming giant Nintendo has admitted that hackers have breached 300,000 accounts since early April, gaining access to personal information such as birthdays and email addresses but not credit-card details.

Japanese carmaker Honda said Tuesday that it has been hit by a cyberattack that disrupted its business in several countries, though it expects the overall impact to be contained.

Thousands of individuals and hundreds of organizations across six continents have been targeted by the same hack-for-hire group over the past several years, Citizen Lab reveals in a new report.

Adobe on Tuesday announced the release of security updates for its Flash Player, Framemaker and Experience Manager products.

Malicious attacks targeting the United States utilities sector last year were observed employing a previously unknown malware family that allows hackers to take over compromised systems, Proofpoint reports.

Vectra Integrates Cognito with Microsoft Defender ATP and Azure Sentinel to Form a SOC Visibility Triad

jSonar, a company that provides database security solutions, on Tuesday announced that it raised $50 million from Goldman Sachs.This growth round is jSonar's first institutional round of funding. The company told SecurityWeek that it did previously secure some private investments, but it can’t disclose exact details.

Two critical vulnerabilities patched recently by IBM in its WebSphere Application Server product can be exploited by a remote, unauthenticated attacker to execute arbitrary code with elevated privileges.

Global Companies’ Evaluation of Cybersecurity Solutions Selection Has Been Steadily Changing