SecurityWeek

Microsoft’s latest security updates patch more wormable vulnerabilities related to Remote Desktop Services (RDS) and the company has published a blog post to warn users about the risk they pose.

The convergence of IT and operational technology (OT) is well underway, making IT’s influence on OT environments — both at the technological and personnel levels — critical to the future success of businesses. While these teams have not typically worked together and often find themselves at odds when it comes to networking, maintenance and ownership, the time for playing nice is now. Here are some critical factors for success in managing the meeting of these two worlds.

Researchers at Netflix and Google have discovered a total of eight denial-of-service (DoS) vulnerabilities affecting various HTTP/2 implementations, including from major tech companies such as Amazon, Apple, Facebook and Microsoft.

There’s no question the world is getting more agile. These days even companies in traditional brick and mortar industries, those luddites and laggards from the old school, are transitioning their business logic to web sites and apps. 

Facebook has paid hundreds of contractors to listen to and transcribe snippets of users' conversations, US media reported on Tuesday, amid heightened scrutiny of the social network's data collection practices.

Siemens on Tuesday released several new advisories describing vulnerabilities in the company’s products, including an unpatched denial-of-service (DoS) flaw affecting SCALANCE X industrial switches.

More than 750,000 systems remain vulnerable to the BlueKeep vulnerability as patching rate has decreased by around 85%, a new report from security firm BitSight reveals. 

A parliamentary committee in the Czech Republic says a national security agency told its members that a foreign country state is believed to be behind a cyberattack on the Czech Foreign Ministry.

Microsoft’s August 2019 Patch Tuesday updates fix more than 90 vulnerabilities, but none of them have been exploited in attacks or disclosed publicly before the patches were released.

Adobe’s Patch Tuesday updates for August 2019 resolve 118 vulnerabilities across the company’s After Effects, Character Animator, Premiere Pro, Prelude, Creative Cloud, Acrobat and Reader, Experience Manager, and Photoshop products.

The Mutually Agreed Norms for Routing Security (MANRS) initiative on Tuesday announced the availability of a free tool designed to help network operators identify potential issues and improve routing security.

It was not that long ago when one of the measures of a company’s maturity was whether it had its own data center or not. In some cases, the data center occupied one or two floors in the company’s facility while in others, the data center may have sprawled across several locations for full redundancy.

Researchers have uncovered some potentially serious SQLite vulnerabilities and they have demonstrated their findings by hacking an iPhone and a command and control (C&C) server used by malware.

U.N.

The Cloud Atlas threat group has continued conducting cyber espionage operations and its recent attacks have involved a new piece of polymorphic malware.

The FBI is looking for outside contractors to monitor social media for potential threats, setting up a possible conflict with Facebook and other companies over privacy.

Researchers at cybersecurity firm Check Point have demonstrated that malicious actors could hack a DSLR camera and infect it with a piece of ransomware.

Misalignment between cyber risk and business risk is one of the biggest causes and symptoms, of misalignment between the CISO, the C-suite, and the board. Part of the issue is that many of the processes and tools currently used to measure and manage business risk were established long before cyber risk (or cyber anything) entered the picture.

McAfee last week announced the acquisition of NanoSec, a California-based company that specializes in security solutions designed to help organizations protect data center and cloud traffic.

Apple last week announced that it’s making some significant changes to its bug bounty program, making it public and expanding the list of covered products.