SecurityWeek

Rep. Tom Graves, R-Ga., is reintroducing his Active Cyber Defense Bill today. He first floated the idea in March 2017, and published an updated version in May 2017. It was then, and is now, being described as the 'hacking back' bill.

Hong Kong's tech-savvy protesters are going digitally dark as they try to avoid surveillance and potential future prosecutions, disabling location tracking on their phones, buying train tickets with cash and purging their social media conversations.

Security organizations are grappling with anywhere from five to 50+ different security vendors and solutions. These disparate products each generate their own set of alerts which quickly becomes overwhelming.

Belgium-based aircraft parts maker ASCO Industries has been severely hit by a ransomware attack that started last week.

Starting this week, Android phones can be used to verify sign-ins on Apple iPads and iPhones, Google announced. The capability is enabled by the recently introduced 2-Step Verification (2SV) method that allows users to protect accounts with a security key built into their Android phones. 

A researcher at security services and consulting company SEC Consult discovered that some industrial managed switches made by WAGO are affected by several serious vulnerabilities.

A researcher revealed on Wednesday that he discovered a blind cross-site scripting (XSS) vulnerability that could have been exploited to attack Google employees and possibly gain access to invoices and other sensitive information.

Fireblocks Emerges From Stealth Mode to Protect Digital Assets in Hot Wallets and Transit

Rapid7 has analyzed the visible cyber exposure of some of the UK's largest companies -- the FTSE 250.

“The Cloud Wars” may be dominating IT news headlines, but what does this phrase actually mean? And is it something that an enterprise needs to be concerned with? 

Israel-based cloud visibility solutions provider Orca Security on Wednesday emerged from stealth mode with $6.5 million in seed funding from YL Ventures.

Two U.S. senators asked the FBI on Wednesday to explain what it has done to investigate the suspected hack by Russian intelligence of a Florida-based voting software company before the 2016 election.

Encrypted messaging service Telegram suffered a major cyber-attack that appeared to originate from China, the company's CEO said Thursday, linking it to the ongoing political unrest in Hong Kong.

Microsoft on Tuesday released security patches for nearly 90 vulnerabilities, including two Critical bugs impacting the proprietary authentication protocol NTLM. 

Insecurity Can Help Organizations Continually Learn and Make Changes

Email-focused cybersecurity firm Vade Secure has agreed to a €70 million (approximately US$79.3 million) investment by venture capital firm General Catalyst. 

Following four years of self-funded fine-tuning in Europe, start-up security awareness firm CybeReady has expanded into the U.S. market with an initial funding round of $5 million led by Baseline Ventures.

A vulnerability identified by researchers in a popular Evernote extension for Chrome can be exploited by hackers to steal sensitive information from the websites accessed by a user.

Security awareness training firm KnowBe4 announced on Wednesday that it has taken a $300 million investment led by private equity giant KKR.

Files using the Digital Imaging and Communications in Medicine (DICOM) standard can be abused to hide malware, the U.S. Department of Homeland Security (DHS) warned on Tuesday.