SecurityWeek

Free and open certificate authority Let’s Encrypt on Thursday issued its billionth certificate, four and a half years after issuing the first certificate.

Intel patched over 230 vulnerabilities in its products last year, but less than a dozen impacted its processors, according to the company’s 2019 Product Security Report.

Facebook on Thursday filed a federal lawsuit against oneAudience data intelligence firm over a tactic it used to gather information about users of social media platforms.

Cisco says it will release patches for wireless devices affected by the recently disclosed Wi-Fi chip vulnerability named Kr00k. The company says the flaw impacts some of its routers, firewalls, access points and phones.

A Lincoln health care company has been targeted by cybercriminals, but company officials said there’s no evidence of any patient data being compromised.

Report Examines the Rise of Cybercrime Across Latin America

Cisco on Wednesday released patches for 11 vulnerabilities in its products, including multiple flaws that impact Cisco UCS Manager, FXOS, and NX-OS software.

Hackers have started scanning the Internet for Microsoft Exchange Server instances that are affected by a remote code execution vulnerability patched earlier this month.

Many Vulnerabilities Found in Popular Docker Images, But Most Are Not Loaded Into Memory

A group of researchers has built a sandbox framework that can improve the security of Firefox by isolating third-party libraries used by the browser.

The Democratic National Committee has warned its presidential candidates to be cautious after Bernie Sanders’ campaign reported that an “impersonator” with a domain registered overseas had posed as one of its staffers and sought conversations with members of at least two other campaigns.

A white hat hacker has earned $8,500 for a serious vulnerability that exposed the email addresses of HackerOne users.

Ever since the birth of the Next-Generation Firewall, organizations have come to expect security devices that combine a variety of critical features and functions into a single package. To meet that demand, the number of security vendors referring to their offerings as a “platform” rather than an appliance, even if that platform only offers a handful of independent solutions using separate management interfaces, has grown dramatically.

In the 2016 film “Norman: The Moderate Rise and Tragic Fall of a New York Fixer”, Norman, the lead character, appears to be a successful businessman on the surface. Only after we begin to dig deeper do we learn that Norman is essentially more a complexly woven web of lies and inconsistencies than he is a real person.

Facebook and Google this week announced the decision to postpone this year’s BountyCon bug hunting conference due to health risks.

A recently disclosed zero-day vulnerability in Zyxel network-attached storage (NAS) devices also impacts over twenty of the vendor’s firewalls.

OneTrust, a provider of privacy and security compliance tools, has raised $210 million in Series B funding at a valuation of $2.7 billion.The Series B round was led by Coatue and Insight Partners, and combined with OneTrust's $200 million Series A, brings the total amount raised by the company to $410 million.

Santa Clara, Calif-based McAfee has entered into a definitive agreement to acquire Baltimore, MD-based Light Point Security. Financial details have not been disclosed, but on completion of the acquisition, the Light Point staff will join McAfee, while the Light Point technology will be integrated into the McAfee Secure Web Gateway.

New scanning capabilities that Google rolled out to Gmail have resulted in an increased overall detection rate of malicious documents.