SecurityWeek

Facebook on Thursday said it was ready for a data privacy law that will go into effect in its home state of California at the start of next year.

TrickBot/Anchor Campaign Could be a New Targeted Magecart Attack Against High-Profile Companies

StrongSalt Helps Customers Gain Compliance Through Searchable Encryption for Cloud Services and Enterprise Applications

One of the vulnerabilities addressed this week by Apple can be exploited to make iPhones and iPads unusable by getting them to continuously display a popup message.

DDoS Attacks Are Becoming More Advanced With the Aim to Obfuscate Network Processes

The U.S. Defense Department announced this week that companies hoping to obtain defense contracts will have to demonstrate that they can keep sensitive information safe.

Twitter co-founder Jack Dorsey is funding research aimed at changing the way information circulates on social media -- with the goal of combating online violence, hate and disinformation.

The FBI said Monday it has found no signs of any link between a cyberattack on computer systems of a Florida Panhandle city and last week’s attack at the naval air station there in which a Saudi flight student killed three sailors and wounded eight others.

Microsoft Security Essentials (MSE) will stop protecting Windows 7 PCs on January 14, 2020, when support for Windows 7 is set to end.

Backup, security and disaster recovery solutions provider Acronis this week announced that it has acquired 5nine, a company that specializes in cloud management and security solutions.

SAP issued five new Security Notes this week as part of its December 2019 Security Patch Day, to which it also added 2 updates for previously released Security Notes.All of the new Security Notes released this month are rated Medium priority and feature CVSS scores ranging between 6.7 and 4.3. 

A newly disclosed attack targeting Intel processors utilizes CPU voltage modifications to expose data stored using Intel's Software Guard Extensions (SGX). 

Security updates released by Apple this week address numerous vulnerabilities in macOS Catalina, iOS and iPadOS, Safari, and other software products.

Google this week released Chrome 79 to the stable channel with a total of 51 security fixes, including 37 reported by external researchers, two of which are considered critical severity.

It’s been almost a decade since the first commercial “for-profit” bug bounty companies launched leveraging crowdsourced intelligence to uncover security vulnerabilities and simultaneously creating uncertainty for boutique security companies around the globe.

An Iranian minster said Wednesday the Islamic republic had recently thwarted a "highly organiz ed cyber attack" targeting its e-government infrastructure.

CyberGRX, a third-party cyber risk management firm based in Denver, Colorado, this week announced that it raised $40 million in a Series D funding round, which brings the total raised by the company to $100 million.

Vulnerability in KeyWe Smart Locks Could be Exploited by Attackers to Intercept Communications to Steal Key and Unlock Doors

Adobe’s Patch Tuesday updates for December 2019 fix vulnerabilities in the company’s Acrobat and Reader, Brackets, Photoshop, and ColdFusion products.

Microsoft’s December 2019 Patch Tuesday updates fix a total of 36 vulnerabilities, including a Windows zero-day that has been exploited in attacks alongside a Chrome zero-day.