SecurityWeek

Network security firm Fortinet announced that is has acquired Security Orchestration, Automation and Response (SOAR) platform provider CyberSponse. The terms of the acquisition were not disclosed. 

A credential harvesting campaign has been targeting multiple government procurement services in the United States and abroad, Anomali reveals. 

Critical infrastructure protection company OPSWAT has acquired Network Access Control (NAC) and Software Defined Perimeter (SDP) solutions provider Impulse.

FireEye this week unveiled a new threat intelligence service focusing on operational technology (OT) and other systems that manage physical processes.The company says its Cyber Physical Threat Intelligence service provides organizations context, data and actionable analysis on threats targeting OT, ICS and IoT systems.

Messaging platform WhatsApp this week announced plans to take legal action against individuals and companies that abuse the platform for bulk messaging.

Twitter Funds Team to Develop an Open and Decentralized Standard for Social Media

Legislation that aims to protect the U.S. energy grid from cyberattacks passed the House this week after being added to the 2020 National Defense Authorization Act (NDAA).The 2020 NDAA passed the House by a vote of 377 to 48 and President Donald Trump is expected to sign it soon.

Cheyenne Regional Medical Center has added security measures and is informing people whose personal information was exposed due to a data breach earlier this year, hospital officials said.

The long-standing Waterbear campaign has returned with new evasion capabilities, employing API hooking techniques to hide its network behavior from security products, Trend Micro reports.

A new, highly targeted piece of ransomware has hit a handful of tech and healthcare companies in Europe and the United States, BlackBerry Cylance reports. 

Facebook on Thursday said it was ready for a data privacy law that will go into effect in its home state of California at the start of next year.

TrickBot/Anchor Campaign Could be a New Targeted Magecart Attack Against High-Profile Companies

StrongSalt Helps Customers Gain Compliance Through Searchable Encryption for Cloud Services and Enterprise Applications

One of the vulnerabilities addressed this week by Apple can be exploited to make iPhones and iPads unusable by getting them to continuously display a popup message.

DDoS Attacks Are Becoming More Advanced With the Aim to Obfuscate Network Processes

The U.S. Defense Department announced this week that companies hoping to obtain defense contracts will have to demonstrate that they can keep sensitive information safe.

Twitter co-founder Jack Dorsey is funding research aimed at changing the way information circulates on social media -- with the goal of combating online violence, hate and disinformation.

The FBI said Monday it has found no signs of any link between a cyberattack on computer systems of a Florida Panhandle city and last week’s attack at the naval air station there in which a Saudi flight student killed three sailors and wounded eight others.

Microsoft Security Essentials (MSE) will stop protecting Windows 7 PCs on January 14, 2020, when support for Windows 7 is set to end.