SecurityWeek

A serious vulnerability found in the Profinet industrial communication protocol exposes devices from Siemens, Moxa and possibly other vendors to denial-of-service (DoS) attacks.

A Google Project Zero researcher claims that some of the security features added by Samsung to the Android kernel don’t provide meaningful protection and they actually increase the attack surface.

Cyber-threat intelligence company Sixgill this week announced the closing of a $15 million funding round.Founded in 2014, the Israel-based company leverages automation to help Fortune 500 companies, financial institutions, governments, and law enforcement agencies stay protected from cyber-threats lurking on the dark web.

In a World Where Performance and Scalability are King, Security Stands to be a Significant Barrier to Success

Email remains the biggest single cyber threat to business. Phishing can introduce malware either directly or later via stolen credentials, while BEC scam emails can lead to direct financial loss.

The Facebook-owned messaging service WhatsApp said Wednesday it now has more than two billion users around the world as it reaffirmed its commitment to strong encryption to protect privacy.

Facebook this week said it removed three unrelated networks of accounts, pages, and groups that engaged in inauthentic behavior on behalf of foreign governments or threat actors.

Enterprise SOC-as-a-Service company Cysiv this week announced that it has raised $26 million in a Series A funding round.

SAP’s February 2020 Security Patch Day brought 13 new Security Notes and updates to 2 previously released Patch Day Security Notes.

Google Play Protect now scans over 100 billion applications on Android devices daily, according to new figures disclosed by Google this week.Google Play Protect is the protection mechanism built into the Android operating system to help protect devices and data from malware and other threats. 

Apple has joined the FIDO Alliance, an organization that aims to help reduce the use of passwords by providing free and open authentication standards.

Siemens’ Patch Tuesday updates for February 2020 address serious denial-of-service (DoS) vulnerabilities in several of the company’s products.

Automated Attack Platform Lets Organizations Continuously Hack Themselves to Test Their Attack Surface

Both the frequency and costs associated with Internet crime have increased in 2019, with email compromise scams generating half of the incurred financial loss, according to the FBI.

More than 15.1 billion records were exposed in 2019 as part of the data breaches that were publicly reported, Risk Based Security reveals.The number of exposed records registered a massive 284% spike compared to the previous year (which had 5.3 billion records exposed), and also marked a 91% increase compared to 2017 (7.95 billion records).

KBOT, a piece of malware that has been infecting computers for the past year, has been classified by Kaspersky as a “living virus,” a class of malware thought to be extinct.

Deep Instinct, a cybersecurity company that uses deep learning to predict, identify and prevent attacks, announced on Wednesday that it has raised $43 million in a Series C funding round.

The easiest way for a cyber-attacker to gain access to sensitive data is by compromising an end user’s identity and credentials. Things get even worse if a stolen identity belongs to a privileged user, who has even broader access, and therefore provides the intruder with “the keys to the kingdom”.

Several cybersecurity companies have spotted campaigns that use coronavirus-themed emails to deliver malware, phishing attempts and scams.