SecurityWeek

Security Tools and Threat Feeds Are Creating New Types and Formats of Data to be Collected in Massive Volumes

Beijing accused the United States on Thursday of smearing China after Washington alleged Chinese hackers were attempting to steal research on developing a vaccine against the coronavirus.

Exploit acquisition firm Zerodium announced this week that it’s no longer buying certain types of iOS exploits due to surplus, and the company expects prices to drop in the near future.

The Senate came one vote short Wednesday of approving a proposal to prevent federal law enforcement from obtaining internet browsing information or search history without seeking a warrant.

VMware announced on Wednesday during its virtual Connect 2020 cybersecurity conference the acquisition of Kubernetes security company Octarine and a new Next-Gen Security Operations Center (SOC) Alliance.

A vulnerability that Google has addressed in one of its official WordPress plugins could be abused by attackers to gain access to the Google Search Console of an impacted website.

Group of CISO Angel Investors Supports Promising Cybersecurity Startups With Funding and Valuable Expertise

Code quality and security solutions provider SonarSource has acquired code security testing company RIPS Technologies.Founded in 2008 and headquartered in Geneva, Switzerland, SonarSource provides open-source and commercial code analyzers that support 27 programming languages and aim to help developers solve coding issues in their projects.

Intel on Wednesday announced its new 10th Gen Core vPro processors, which include an enhanced version of Hardware Shield that provides advanced threat detection capabilities.

Cybercriminals Are Seeing the Pandemic as a Huge Business Opportunity

Several Microsoft Office vulnerabilities that were patched years ago continue to be among the security flaws most exploited in attacks, the U.S. government warns.

US authorities warned healthcare and scientific researchers Wednesday that Chinese-backed hackers were attempting to steal research and intellectual property related to treatments and vaccines for COVID-19.

Security researcher Vinoth Kumar says Facebook awarded him $20,000 after he discovered and reported a Document Object Model-based cross-site scripting (DOM XSS) vulnerability that could have been exploited to hijack accounts.

SAP’s May 2020 Security Patch Day updates, which the company released on Tuesday, include a total of 18 Security Notes and 4 updates to previous Notes, with six of them rated Hot News.

Enterprise identity protection company Semperis on Wednesday announced that it raised $40 million in a Series B funding round, which brings the total raised to date to $54 million.

CyberArk on Wednesday announced that it has acquired Idaptive, an Identity as a Service (IDaaS) provider based in Santa Clara, California, for $70 million in cash.

German Chancellor Angela Merkel voiced frustration Wednesday that Russia was targeting her in hacking action, saying she had concrete proof of the "outrageous" spying attempts.

Siemens informed customers on Tuesday that some of its low and high voltage power meters are affected by the Wind River VxWorks vulnerabilities dubbed Urgent/11.

Comparitech security researchers have discovered that thousands of Android applications distributed through Google Play leak sensitive information due to Firebase misconfigurations.

Microsoft's May 2020 security updates patch 111 vulnerabilities, including 16 rated critical, but none of them has been exploited in attacks or disclosed before fixes were released.