SecurityWeek

A white hat hacker has earned $8,500 for a serious vulnerability that exposed the email addresses of HackerOne users.

Ever since the birth of the Next-Generation Firewall, organizations have come to expect security devices that combine a variety of critical features and functions into a single package. To meet that demand, the number of security vendors referring to their offerings as a “platform” rather than an appliance, even if that platform only offers a handful of independent solutions using separate management interfaces, has grown dramatically.

In the 2016 film “Norman: The Moderate Rise and Tragic Fall of a New York Fixer”, Norman, the lead character, appears to be a successful businessman on the surface. Only after we begin to dig deeper do we learn that Norman is essentially more a complexly woven web of lies and inconsistencies than he is a real person.

Facebook and Google this week announced the decision to postpone this year’s BountyCon bug hunting conference due to health risks.

A recently disclosed zero-day vulnerability in Zyxel network-attached storage (NAS) devices also impacts over twenty of the vendor’s firewalls.

OneTrust, a provider of privacy and security compliance tools, has raised $210 million in Series B funding at a valuation of $2.7 billion.The Series B round was led by Coatue and Insight Partners, and combined with OneTrust's $200 million Series A, brings the total amount raised by the company to $410 million.

Santa Clara, Calif-based McAfee has entered into a definitive agreement to acquire Baltimore, MD-based Light Point Security. Financial details have not been disclosed, but on completion of the acquisition, the Light Point staff will join McAfee, while the Light Point technology will be integrated into the McAfee Secure Web Gateway.

New scanning capabilities that Google rolled out to Gmail have resulted in an increased overall detection rate of malicious documents.

A new vulnerability, which may have affected over one billion Wi-Fi-capable devices before patches were released, could have allowed hackers to obtain sensitive information from wireless communications, cybersecurity firm ESET revealed on Wednesday.

The Iranian cyber-espionage group referred to as MuddyWater continues to focus on long-running operations even after a U.S. airstrike killed General Qassem Soleimani on January 2.

Russia wants to watch Americans “tear ourselves apart” as the United States heads toward elections, an FBI official warned Monday.

The Reading Municipal Light Department (RMLD), an electric utility in Massachusetts, informed customers on Monday that its systems were targeted last week in a ransomware attack.RMLD says it serves over 68,000 residents in the towns of Reading, North Reading, Wilmington and Lynnfield Center.

An update released this week for the OpenSMTPD mail server addresses an out-of-bounds read vulnerability that could lead to arbitrary command execution.OpenSMTPD is the open source implementation of the Simple Mail Transfer Protocol (SMTP) in OpenBSD, and its portable version can run on multiple Linux distributions, and Apple’s Mac OS X platform.

What You Need to Know to Make Sure You’re Headed in the Right Direction on Your Authentication Journey.   As Risk-Based Authentication Methods Continue to Evolve, Is It Time to Revisit Your Approach? 

Britain's Financial Conduct Authority on Tuesday admitted to a data breach, in an embarrassing revelation for the regulator and its boss, who shortly takes over at the Bank of England.

Mozilla has started rolling out encrypted DNS-over-HTTPS (DoH) by default for its Firefox users in the United States. 

Samsung said Tuesday that a “technical error” caused its website to display other customers’ personal information.The technology company said the error affected only its U.K. website at http://samsung.com/UK and affected fewer than 150 customers.