SecurityWeek

Swiss insurance company Zurich last week announced new cyber insurance policy endorsements for organizations in the manufacturing industry.Zurich says many manufacturing companies, particularly mid-sized organizations, have been unaware of the risks posed by cyber threats, which can have a serious impact on production and their reputation.

A newly discovered backdoor associated with the advanced persistent threat (APT) actor Platinum has a long sequence of dropping, downloading and installing stages, Kaspersky reveals.

The recent attacks exploiting the BlueKeep vulnerability to deliver cryptocurrency miners caused some systems to crash due to a Meltdown patch being deployed on the targeted machines.

The allegations of spying by former Twitter employees for Saudi Arabia underscore the risks for Silicon Valley firms holding sensitive data which make the platforms ripe for espionage.

Critical vulnerabilities impacting Medtronic Valleylab products could allow attackers to overwrite files and achieve remote code execution, the Department of Homeland Security (DHS) warns.

805,000 Cybersecurity Professionals Are Currently Estimated to be Working in the U.S., Study Finds

After news broke that cybercriminals have started leveraging the BlueKeep vulnerability to deliver cryptocurrency miners, Microsoft has warned that the exploit will likely also be used to deliver more “impactful and damaging” payloads.

Cisco Talos security researchers have discovered multiple vulnerabilities in the LEADTOOLS imaging toolkits that could lead to code execution on the victim system.

Did you know that Thanksgiving is not only celebrated in the United States but in seven other countries around the world? One popular tradition is to take time during the Thanksgiving dinner to share something you’re thankful for. As the holiday approaches, I thought I’d take the opportunity to share three things I believe every security professional can give thanks for.

Consulting giant Accenture on Thursday announced the launch of three cyber ranges designed to help industrial companies practice their cyberattack response plan.

Cybersecurity startup firm Sepio Systems, with headquarters in Gaithersburg, Maryland and R&D in Tel Aviv, Israel, has closed a $6.5 million Series A funding round. The funding was led by Hanaco Ventures and Merlin Ventures, with the participation of existing investors Energias de Portugal (EDP), Mindset Ventures and Pico Partners. Total funding raised by Sepio now stands at $11 million.

Whistleblowers and digital pioneers have long been sounding the alarm about abuses of our privacy online.Now, a slew of tech entrepreneurs are bidding to turn growing consciousness about the problem into a money-making industry and many showcased their skills at this week's Web Summit in Lisbon.

A newly discovered exploit kit (EK) is being employed in live attacks despite the fact that it’s still in an unfinished state, Trend Micro’s security researchers reveal.

A Long Island firm sold tens of millions of dollars in Chinese-made surveillance and other sensitive security equipment to customers, including the U.S. military to use on aircraft carriers, by falsely claiming the goods were manufactured in America, federal prosecutors said Thursday.

Pwn2Own Tokyo 2019 has come to an end and on the second day of the hacking contest bug bounty hunters have earned a total of $120,000 for demonstrating exploits against Samsung Galaxy S10 and Xiaomi Mi9 phones and TP-Link AC1750 routers.

A new set of security patches that Cisco released this week fixes multiple vulnerabilities across products such as Small Business Routers, TelePresence Collaboration Endpoint, RoomOS, and others.

Saudi Arabia's King Salman hosted the Central Intelligence Agency's director Thursday, state media said, after three people were charged in the US with spying on Twitter users critical of the royal family.

Ecommerce fraud prevention solutions provider Riskified has raised $165 million in a Series E funding round at a valuation of over $1 billion.

Google this week announced a partnership with several security solutions providers, aimed at fighting bad applications in the Android ecosystem.

Digital innovation is changing every aspect of how organizations conduct business. But nowhere has its impact been felt more acutely than among the security team. Those teams, already grappling with serious challenges due to the growing cybersecurity skills gap, are being tasked to secure an ever-expanding network footprint.