SecurityWeek

Google this week announced the general availability of its standard DNS over HTTPS (DoH) service, which includes full RFC 8484 support.

A second small Florida city this month has paid hundreds of thousands of dollars to hackers who took over most of its computer operations, an official said Wednesday, while a third Florida city said its data was breached.

Singapore-based cryptocurrency exchange Bitrue revealed on Thursday that hackers managed to access and move the funds of tens of its customers.

Chrome OS version 75, which Google released on Wednesday in the stable channel, adds more mitigations for recently disclosed Microarchitectural Data Sampling (MDS) vulnerabilities affecting most Intel processors made in the last decade.

Cisco on Wednesday informed customers that its Data Center Network Manager (DCNM) product is affected by several vulnerabilities, including ones described as “critical” and “high severity.”

A French consumer rights group said Wednesday that it has launched a class action lawsuit against US tech giant Google for violating the EU's strict data privacy laws.

Waltham, MA-based email security firm GreatHorn has raised an additional $13 million in a new funding round technically filed as a Series A-1. The round was co-led by new investor RRE Ventures and existing investor .406 Ventures, with participation from other existing investors including Techstars Ventures, V1.VC and Uncork Capital.

Vulcan Cyber, an Israel-based startup that specializes in vulnerability remediation solutions, on Wednesday announced that it raised $10 million in a Series A funding round.

Presidential Alerts that all modern cell phones in the United States are required to receive and display as part of the Wireless Emergency Alert (WEA) program can be spoofed, researchers have discovered. 

European authorities this week announced the arrest of 6 individuals in connection with a €24 million ($27.2 million) cryptocurrency theft.

A Successful Security Organization Knows to be on the Lookout for Predators and to Navigate the Troubled Waters Around Them

Google on Tuesday announced that G Suite users can now log in on platforms that don’t directly support security keys using security codes generated by their security keys.

Researchers have discovered a chain of flaws in EA Games' login process that could allow an attacker to take over the accounts of any or multiple EA gamers -- and there are 300 million of these around the globe. Stolen gaming credentials are valuable and frequently sold on the internet.

Amazon Web Services (AWS) on Tuesday announced the launch of VPC Traffic Mirroring, a new feature that allows users to capture and inspect network traffic from their Amazon EC2 instances.

A new report from the U.S. Senate’s Committee on Homeland Security and Governmental Affairs has revealed the decade-long failure of several important federal agencies to secure their systems and protect sensitive and personal information.

Instagram doesn't snoop on private conversations as part of its advertising targeting strategy, the head of the popular social media site said in an interview Tuesday.

Amazon Web Services (AWS) on Tuesday announced the general availability of Security Hub, a service that aggregates and prioritizes alerts from AWS and many third-party security tools.

Cybercriminals are increasingly using shimmers instead of skimmers in attacks targeting automated teller machines, Flashpoint reports. 

Over the past ten years, I have led and supported incident response engagements across nearly every industry vertical and trained security teams of all sizes to develop and improve their detection and response capabilities. One of the first areas addressed in these trainings is understanding whether an attack is targeted or opportunistic.