SecurityWeek

France has not changed its mind on rejecting any asylum request from US surveillance whistleblower Edward Snowden, its foreign minister said Thursday, after the former CIA employee said he would like sanctuary in the country.

The United States Department of Justice this week announced the arrest of two individuals charged for participating in a long-term tech support fraud scheme.

VMware this week patched code execution, command injection, information disclosure and denial-of-service (DoS) vulnerabilities in its ESXi, vCenter Server, Workstation, Fusion, VMRC and Horizon Client products.

HP on Thursday announced the acquisition of California-based endpoint security solutions provider Bromium. Financial terms of the deal have not been disclosed.

A key Senate panel on Thursday approved $250 million to help states beef up their election systems, freeing up the money after Senate Majority Leader Mitch McConnell came under criticism from Democrats for impeding separate election security legislation.

Since the start of September 2019 we’ve seen some major attacks, including a Facebook data leak which exposed more than 400 million telephone numbers and an Android software vulnerability which revealed devices were susceptible to SMS-based attacks that could change device settings remotely.

A recently observed phishing campaign is targeting taxpayers in the United States in an attempt to infect their machines with a piece of malware named Amadey, Cofense security researchers have discovered.

The MITRE Corporation this week published an updated list of the most dangerous software weaknesses and vulnerabilities.Known as the Common Weakness Enumeration (CWE) Top 25 Most Dangerous Software Errors (CWE Top 25), the new list has been created based on real-world vulnerabilities found in the NVD (National Vulnerability Database).

Dataswift, a Cambridge, UK-based company founded by Professor Irene Ng in 2015, has raised nearly $2 million (£1.6 million pounds) in seed funding from IQ Capital, with participation from Pacific & Orient Properties Ltd and Alphanumeric Corporation. Dataswift sells web services technology to apps and websites who want their users to have HAT personal data accounts.

Kaspersky on Thursday announced the ICS Vulnerabilities Database, a new service designed to help industrial organizations keep track of relevant security flaws and protect their networks against potential threats.

It isn’t that no one saw it coming.  After all, today’s regimen of European Union General Data Protection Regulations had been crafted under public scrutiny since 2012 and in full force since May 2018.  But its implementation left a degree of uncertainty, particularly among multinationals.

Harbor registries with default settings are impacted by a vulnerability that allows any user to elevate privileges to administrator, Palo Alto Networks reports.

A Magecart threat actor has compromised the websites of two hotel chains to inject scripts targeting Android and iOS users, Trend Micro’s security researchers warn.

Microsoft has rushed to fix a bug that prevented users from running a quick scan or a full system scan with Windows Defender.

Denver-based identity management solutions provider Ping Identity on Thursday announced that it’s offering 12,500,000 shares of its common stock at $15 per share, which means the company hopes to raise at least $187 million in its initial public offering (IPO).

The Smominru botnet continues to spread at a fast pace, infecting around 4,700 new hosts daily during the month of August, Guardicore Labs reports.

Facebook chief executive Mark Zuckerberg was expected in Washington Thursday for private talks with policymakers as the leading social network faces a myriad of regulatory and legal issues.Zuckerberg's visit comes five months after his stormy appearance before Congress, where he was grilled on Facebook's data protection and privacy missteps.

Acronis on Wednesday announced that it raised $147 million. With this funding round, led by Goldman Sachs, Acronis becomes a unicorn company with a valuation exceeding $1 billion.

Microsoft-owned GitHub announced on Wednesday that it has acquired code analysis platform provider Semmle and the company is now a Common Vulnerabilities and Exposures (CVE) Numbering Authority.

Philippines immigration agents, backed by troops, have arrested more than 300 Chinese for alleged cyber crimes, a week after a similar number were detained during a raid linked to investment fraud.The Bureau of Immigration late Tuesday said 324 Chinese nationals were arrested in Puerto Princesa City on Palawan island during Monday's operation.