SecurityWeek

The criminal use of encryption to hide malware is growing rapidly. In the first half of 2019 the use of encryption by malware almost equaled the entire encrypted volume of 2018, and is not likely to slow. Today, nearly a quarter of malware communicates using TLS.

For the second time within two months, Google has removed United Arab Emirates-developed messaging application ToTok from Google Play.

More than 22,000 vulnerabilities were disclosed in 2019 and over one-third had an exploit or a proof-of-concept (PoC) available, Risk Based Security revealed on Tuesday.

Dell Technologies (NYSE: DELL) on Tuesday said that it has agreed to sell its RSA Security unit to a private equity group for roughly $2.075 billion in cash. 

Enveil, a Fulton, Maryland-based data security company, today announced that it has secured $10 million in Series A funding. 

A vulnerability addressed by F-Secure in some of its business products could have been exploited to bypass their scanning engine using malformed archives.

Mountain View, CA-based Egnyte is combining its Protect and Connect platforms into a single Content Services platform. As data has expanded, business has become more geographically dispersed, and data protection regulations have increased around the world, so it has become more important for companies to have a combined solution for connecting data to staff while obeying all local governance requirements in any region.

ExtraHop Takes Network Security and Visibility to the IoT Edge

Several serious vulnerabilities have been found by a researcher in Secure Mobile Access (SMA) and Secure Remote Access (SRA) appliances made by SonicWall. The vendor has released software updates that patch the flaws.

Microsoft representatives are in Fulton, Wisconsin, on Tuesday to conduct the first real-world trials for ElectionGuard, the company’s open source election security solution.

Peripheral devices with unsigned firmware can expose Windows and Linux machines to attacks, allowing hackers to install stealthy and persistent malware, steal valuable information, or take control of a computer.

Google has removed more than 500 extensions from the Chrome Web Store after they were found performing covert data exfiltration activities. 

The United States' ambassador to Germany said Sunday that President Donald Trump had threatened to cut off intelligence-sharing with countries that dealt with Chinese tech firm Huawei.

A serious vulnerability found in a WordPress themes plugin with over 200,000 active installations can be exploited to wipe a website’s database and gain administrator access to the site.

Infamous Iranian hacking groups APT33 and APT34 appear to have been working together for the past three years to compromise dozens of organizations worldwide, and their attacks involved some of the enterprise VPN vulnerabilities disclosed last year, ClearSky reports.

West Virginia's disabled residents and overseas military personnel will be able to vote by smartphone in the US presidential election this year, the latest development in a push to make balloting more accessible despite persistent security fears.

Microsoft has decided to remove a couple of Windows security updates that address a UEFI issue after some users complained that the updates caused serious problems.

JERUSALEM (AP) — The Israeli military on Sunday said it has thwarted an attempt by the Hamas militant group to hack soldiers’ phones by posing as young, attractive women on social media, striking up friendships and persuading them into downloading malware.

The U.S. Cyber Command (USCYBERCOM) has uploaded new malware samples to VirusTotal, all of which the Command has attributed to the North Korea-linked threat group Lazarus.

Puerto Rico’s government said Friday that it suspended three employees as federal agents investigate an online scam that attempted to steal more than $4 million from the U.S. territory.