SecurityWeek

Bypassing macOS’ Gatekeeper by leveraging trust in network shares is a trivial operation, a security researcher has discovered. 

A recently uncovered piece of sophisticated malware targeting Linux provides attackers with remote control of the infected systems, Intezer’s security researchers have discovered. 

Researchers from Positive Technologies have discovered several vulnerabilities in APROL industrial process control systems from Austria-based B&R Industrial Automation.According to the cybersecurity firm, the flaws impact 12 components of the APROL products, which are often used by oil and gas, energy, and mechanical engineering companies.

Checkers Drive-In Restaurants, Inc. on Wednesday informed customers that malware had been found on point-of-sale (PoS) systems at some of its Checkers and Rally's restaurants.

Industrial Internet of Things (IIoT) is an essential part of business transformation and the Industry 4.0 revolution. Its use is burgeoning, with more than 7 billion devices in use worldwide. This is expected to grow to more 20 billion by 2025 -- and does not include phones, tablets or laptops. It is a journey just beginning, and nobody yet knows the destination or route.

Marking the one-year anniversary of GDPR coming into force (May 25, 2018), a web-scanning service has analyzed the visible GDPR compliance of the 100 most popular websites in each of the 28 European member states. The scan is non-intrusive. As a result, it cannot say that an organization is compliant (non-compliance can occur deep in the system), but it can say if an organization is not compliant simply by examining the parts that are visible over the internet.

Attackers With the Backing and Sophistication of Nation-States Are Increasingly Targeting Commercial Entities

Apple this week released updates for iTunes and iCloud for Windows applications, to address recently disclosed SQLite and WebKit security flaws in them. iTunes for Windows 12.9.5 was released with patches for a total of 25 vulnerabilities. Of these, four impact SQLite, while the remaining 21 were addressed in WebKit.

Privacy-focused email service ProtonMail has been accused of voluntarily helping law enforcement spy on users. The company has denied the accusations.

Threat intelligence provider Recorded Future announced on Thursday that Insight Partners has agreed to acquire a controlling interest in the company,  in addition to the minority stake previously owned by Insight. The all-cash transaction values Recorded Future at more than $780 million.

The Security Vendor Space is Extremely Noisy and Increasingly Out of Touch With the Needs of the Enterprise

A security breach that led to the premature release of New Zealand's budget resulted from an online bungle, not a sophisticated cyberattack as originally claimed, red-faced officials admitted Thursday.

Network security giant Palo Alto Networks (NYSE: PANW) announced on Wednesday that it has agreed to acquire two security startups that it says will help extend its cloud security capabilities.

[UPDATE 5.30.19 - New Zealand Says Budget Leak Was Bungled, Not Hacked] 

A newly disclosed vulnerability in Docker could be exploited by a malicious attacker to escape the container and gain arbitrary read/write file access on the host with root privileges.

In many organizations, building and securing apps has typically been a siloed affair. The product owner, the network engineer, the developer and the security engineer all come from different teams. And all too often, these teams become fiefdoms that believe their focus is the company’s primary objective. 

Chinese cyber-espionage group Emissary Panda has been targeting government organizations in two different countries in the Middle East, Palo Alto Networks security researchers say.

Google Project Zero researcher Tavis Ormandy revealed on Tuesday that he identified a code execution vulnerability in Microsoft’s Notepad text editor.

AttackIQ, a California-based company that specializes in continuous security validation, on Wednesday announced that it raised $17.6 million in a Series B funding round, which brings the total raised by the firm to roughly $35 million.

Facebook and Twitter said Tuesday they shuttered accounts used in an Iran-based social media campaign to sway public opinion by impersonating reporters, politicians and others.