SecurityWeek

Chinese telecom giant Huawei stepped up its legal battle on Wednesday to overturn US legislation barring American federal agencies from buying its products amid an escalating high-tech dispute.

News and social media aggregator Flipboard revealed on Tuesday that it suffered a serious breach involving unauthorized access to some databases storing user account information.

FireEye (NASDAQ: FEYE) announced on Tuesday that it has acquired Verodin, a provider of tools that help test the effectiveness of cyber security controls, in a deal valued at roughly $250 million in cash and stock.

The US city of Baltimore, a victim this month of a cyberattack that paralyzed part of its computer network, will not pay a ransom to undo the damage, Mayor Bernard Young said Tuesday.

HawkEye keylogger campaigns observed in April and May 2019 focused on targeting business users, IBM X-Force security researchers say. 

Researchers have detected what they believe to be new activity from Chinese cyber espionage group, APT10. The activity surfaced in the Philippines and shares similar tactics, techniques, and procedures (TTPs) and code associated with APT10.

This is an age of large scale political social engineering through social media, both by advertising and the presentation of misleading data. International social engineering became frontpage news with the 2016 US presidential elections, but has not abated since. Researchers with the Sherpa project analyzed the use of social media as a recommendation system -- specifically Twitter -- ahead of the European elections in May 2019.

HP on Tuesday announced that it teamed up with cybersecurity firm Deep Instinct to provide a new malware protection solution for its latest EliteBook and ZBook laptops.

Nearly one million devices are vulnerable to attacks involving the Windows vulnerability dubbed BlueKeep and it appears that hackers have already started scanning the web in search of potential targets.

Sectigo (formerly Comodo CA) says it revoked more than 100 digital certificates following a report from Chronicle that thousands of malware samples found on VirusTotal over the past year were digitally signed by certificates issued by Comodo. 

Several products made by Siemens Healthineers, a Siemens company that specializes in medical technology, are affected by a recently patched Windows vulnerability tracked as CVE-2019-0708 and BlueKeep.

The website of financial services company First American Financial until recently exposed hundreds of millions of documents containing sensitive information, security blogger Brian Krebs reported on Friday.

Almost exactly one year after the stringent European General Data Protection Regulation came into effect (May 25, 2019), the Supreme Court of the state of Georgia has ruled (May 20,  2019) that the state government does not have an inherent obligation to protect citizens' personal information that it stores.

Microsoft-owned GitHub on Thursday announced the introduction of several new security tools and features designed to help developers secure their code.

Microsoft’s unified endpoint security solution is now publicly available for Mac users, following two months of limited preview. 

The EU's strict data laws have set the global benchmark for protecting personal information online since coming into force a year ago, but some worry that many users have barely noticed the change.

The New York State Department of Financial Services (DFS) this week announced that it has launched a new cybersecurity division whose role is to protect consumers and financial services organizations from cyber threats.

Microsoft this week made the Windows Defender Application Guard extensions generally available, which now provides hardware-based isolation to all Chrome and Firefox users on Windows 10.

External factors, including security tools shifting to the cloud, the rise of Endpoint Detection and Response (EDR) solutions, and the cybersecurity talent shortage, are presenting challenges for security operations centers (SOCs). There is a lot of talk right now about the need for SOCs to become more efficient and effective to address not only these factors but to also become more ‘intelligent.’ However, this notion of an intelligent SOC is not new.

A superseding indictment returned by a U.S. federal grand jury on Thursday charges WikiLeaks founder Julian Assange with 18 counts related to illegally obtaining and disclosing classified information.