SecurityWeek

Ireland’s privacy regulator says it’s investigating Facebook over the social media giant’s recent revelation that it had left hundreds of millions of user passwords exposed.The Irish Data Protection Commission said Thursday that it opened a statutory inquiry this week into Facebook after the company notified it about the security lapse.

The U.S. National Institute of Standards and Technology (NIST) this week announced that updates to its Automated Combinatorial Testing for Software (ACTS) research toolkit should help developers of complex safety-critical applications find potentially dangerous errors and make their software safer.

Canada’s privacy czar said Thursday that he is taking Facebook to court after finding that lax practices at the social media giant allowed personal information to be used for political purposes.

British officials downplayed reports that Prime Minister Theresa May will allow China’s Huawei to supply parts of the U.K.’s new internet network, a decision that goes against U.S. pleas to ban the firm as it could help Beijing’s spying efforts.

Free code repositories on the Microsoft-owned GitHub have been abused since at least mid-2017 to host phishing websites, according to researchers from Proofpoint.

FireEye’s analysis of the Carbanak source code that emerged on VirusTotal recently found no use of new exploits. Their review of the code also verified previous assumptions on the group behind a series of cyberattacks that used the malware. 

Swiss-based special-purpose vehicle maker Aebi Schmidt informed customers and business partners on Thursday that some of its operations may be disrupted as a result of a cyberattack.

A cybersecurity research company has uncovered over 30 security issues in Java Card technology, but Oracle and Gemalto appear to downplay the impact of the flaws.

Organizations Must Understand Their Environments and React Immediately When Something is Amiss

Amnesty International's Hong Kong office has been hit by a years-long cyberattack from hackers with known links to the Chinese government, the rights group said Thursday.

This May marks the first anniversary of the European Union (EU)’s General Data Protection Regulation (GDPR) having taken effect. The first statute of its kind, GDPR was a response to an increasing number of security breaches and the exposure of billions of records containing the personal details of countless individuals as a result.

VDOO Connected Trust, an Israel-based company that specializes in securing embedded devices and Internet of Things (IoT) products, on Wednesday announced that it raised $32 million in a Series B funding round.

Facebook said it expects a fine of up to $5 billion from the Federal Trade Commission, which is investigating whether the social network violated its users’ privacy.The company set aside $3 billion in its quarterly earnings report Wednesday as a contingency against the possible penalty but noted that the “matter remains unresolved.”

A top White House official told Kirstjen Nielsen, then Homeland Security secretary, not to bring up election security with President Donald Trump, steering her away from discussing a critical national security threat with a president who bristles at suggestions that Russian interference contributed to his 2016 victory, according to two people familiar with the matter.

Data protection provider Digital Guardian today announced it raised $30 million in a financing round that will help it accelerate product development and innovation.The Waltham, Massachusetts-based company offers a data loss prevention platform that works across the corporate network, traditional endpoints, and cloud applications.

Recently observed attacks targeting officials within government finance authorities and representatives in several embassies in Europe abuse the legitimate TeamViewer application to gain full control of victim machines.

The 2018 Internet Crime Report (ICR) shows that both the incidence and cost of internet crime continues to escalate. Complaints rose 14.3% from 2017 to 351,937 in 2018. Associated losses increased by 90.8% from $1,418.7 million to $2,706.4 million over the same period.

The threat actor behind the DNSpionage campaign has switched to new malware in attacks observed earlier this month, Cisco’s Talos security researchers reveal.

Researchers have uncovered serious denial-of-service (DoS) and improper access control vulnerabilities in X-ray devices made by Japanese imaging giant Fujifilm.

Google this week released Chrome 74 to the stable channel with patches for 39 vulnerabilities, as well as with several other tweaks inside.Of the 39 security fixes included in the new browser iteration, 19 were for vulnerabilities reported by external researchers. These include 5 High severity flaws, 12 Medium risk bugs, and 2 Low severity issues.