SecurityWeek

Oregon Department of Human Services officials say they are notifying about 645,000 clients whose personal information is at risk from a January data breach.

Facebook is getting a taste of the regulatory pushback it will face as it creates a new digital currency with corporate partners.

Professional services company Accenture this week announced the acquisition of Deja vu Security, a provider of security research and consulting to premier technology firms.

Retrieval-Masters Creditors Bureau, the company that operates healthcare billing services provider American Medical Collection Agency (AMCA), has filed for Chapter 11 bankruptcy due to a recent data breach affecting millions of individuals.

Oracle on Tuesday announced that it has released emergency patches for a critical remote code execution vulnerability affecting WebLogic Server, a Java EE application server that is part of the company’s Fusion Middleware offering.

Updates released by Mozilla for its Firefox web browser on Tuesday patch a critical vulnerability that has been actively exploited in attacks.

Internet security firm Cloudflare this week revealed its participation in “League of Entropy,” a worldwide effort of individuals and academic institutions to bring users a quorum of decentralized randomness beacons. 

SecurityScorecard, a provider of security ratings, said it has completed a $50 million Series D financing round led by Riverwood Capital, bringing the company’s total funding to $110 million.

French prosecutors on Tuesday ordered infamous French-Israeli hacker Ulcan to stand trial over a telephone prank targeting the father of a French journalist who died soon after of a heart attack.

A new variant of the well-known Houdini Worm has been spotted in phishing attacks earlier this month, Cofense’s security researchers report. 

The head of London's Serpentine Galleries, Yana Peel, resigned on Tuesday following a newspaper report about her links to a controversial Israeli spyware firm.The board of trustees of the contemporary art galleries announced "with a mix of gratitude and regret" that it has accepted Peel's resignation, adding that she would be "sorely missed".

Internet performance and security firm Cloudflare on Tuesday announced the availability of a free API designed to help certificate authorities (CAs) securly issue certificates by ensuring that malicious actors cannot complete the domain control validation process via BGP hijacking and DNS spoofing attacks.

A recently discovered backdoor can spread itself over a local network, in addition to allowing attackers to install additional malware onto compromised machines. 

A critical remote code execution vulnerability discovered by an IBM X-Force researcher allows an unauthenticated attacker to take complete control of some TP-Link Wi-Fi extenders. Firmware updates that should patch the flaw have been made available by the vendor.

San Francisco, CA-based Aptible has raised $12 million in a Series A funding round led by Maverick Capital, with additional investors Thrive Capital and Western Technology Investment.

The Kremlin on Tuesday said Moscow had been the victim of US cyberattacks "for years" following a New York Times report that Washington is stepping up digital incursions into Russia's power grid.

Facebook’s first-ever global Capture the Flag (CTF) competition took place earlier this month and the company has now made the challenges available in open source. 

A security researcher working for Netflix has discovered that the Linux kernel is affected by potentially serious vulnerabilities that can be exploited by a remote, unauthenticated attacker to launch denial-of-service (DoS) attacks.

Florida’s county elections departments will retain $2.3 million in unspent grant money aimed at stopping cyber-attacks on the state’s voting system, Gov. Ron DeSantis announced Monday.

A threat actor that appears to be based in Iran is targeting a vulnerability in a popular DNA sequencing LIMS software, a security researcher had discovered.