SecurityWeek

Project Blackfin: Multi-Year Research Project Aims to Unlock the Potential of Machine Intelligence in Cybersecurity

Critical vulnerabilities that have been fixed years ago are still present in many popular Android applications due to their developer’s failure to apply patches available for third-party components.

Data protection provider Clumio this week announced the completion of a $135 million Series C funding round, which brings the total raised by the company to date to $186 million.

The DopplePaymer ransomware spreads via existing Domain Admin credentials, not exploits targeting the BlueKeep vulnerability, Microsoft says.

IBM on Wednesday announced the general availability of Cloud Pak for Security, a solution designed to help organizations hunt for threats by combining data from multiple tools and clouds.

Amnesty International issued a scathing indictment of the world’s dominant internet corporations, arguing in a new report that Google and Facebook should be forced to abandon what it calls their surveillance-based business model because it is “predicated on human rights abuse.”

A group of Democratic U.S. senators is questioning Amazon about the security of its Ring doorbell cameras following reports that some Ukraine-based employees had access to video footage from customers’ homes.

ZecOps, a San Francisco-based threat detection and security automation company, announced this week that it has secured a total of $10.2 million through a seed funding round.

New legislation introduced this week aims to put a stop to the flow of Americans’ sensitive personal data to countries that threaten national security. 

United States Senators Chris Coons (D-Del.) and Josh Hawley (R-Mo.) have asked Facebook to provide an explanation on its collection and handling of user location information. 

Disney said Disney Plus account passwords being sold in underground hacking forums are coming from previous breaches at other companies, predating last week’s launch of its streaming service.

Phoenix Keylogger Attempts to Disable More Than 80 security Products, Exfiltrates Data Direct from MemoryThe Phoenix Keylogger, operating at the cusp of keylogger and infostealer, was launched in July 2019. It is sold as malware-as-a-service (MaaS), and appears to be gaining traction in the criminal underworld.

Abnormal Security emerged from stealth mode on Tuesday with $24 million in funding and the launch of its cloud email security platform.

The U.S. National Security Agency (NSA) has published an advisory to provide information on possible mitigations for risks associated with Transport Layer Security Inspection (TLSI).

The Army's use of a China-owned video app called TikTok as part of a new campaign to recruit young people into the service is raising concerns on Capitol Hill.Democratic Sen. Chuck Schumer sent a letter to Army Secretary Ryan McCarthy asking about potential national security risks posed by the social media platform.

A researcher has earned $5,000 from Google for an interesting cross-site scripting (XSS) vulnerability found in the dynamic email feature added a few months ago to Gmail.

The official website for the Monero cryptocurrency was hacked recently and attackers replaced legitimate wallet files offered for download with a malicious version.

Mozilla is celebrating the 15th anniversary of its Firefox web browser with significant updates to the organization’s bug bounty program, including new targets and bigger rewards.

Trend Micro has announced a new security services platform aimed at helping customers simplify hybrid and multi-cloud security.

Watch enough old science fiction movies, and you’re bound to look outside and wonder why the cars on the road don’t drive themselves, why the litter on the sidewalk hasn’t been cleaned up by drones, and why robots aren’t whizzing by with bags full of groceries. The present, it seems, has failed to make good on past promises of the future.