SecurityWeek

Nearly half a million Ubiquiti devices may be affected by a vulnerability that has already been exploited in the wild, security experts warned last week.

New Solution Secures Connections for IoT Devices that Lack Embedded Security

Behavioral biometrics solutions provider and Techstars-backed company TypingDNA has raised $1.5 million in seed funding.  

Attackers recently started abusing the Constrained Application Protocol (CoAP) for the reflection/amplification of distributed denial of service (DDoS) attacks, NETSCOUT warns. 

United States Senators Maggie Hassan (D-NH) and Rob Portman (R-OH) on Friday announced the reintroduction of the bipartisan Department of Homeland Security (DHS) Cyber Hunt and Incident Response Teams Act.

A US energy company, identified by some media reports as Duke Energy, received a $10 million fine from the North American Electric Reliability Corporation (NERC) for nearly 130 violations of the Critical Infrastructure Protection (CIP) standards.

The Siri Shortcuts that Apple introduced in iOS 12 can be abused by attackers for malicious purposes, IBM’s security researchers have discovered.

The Industrial Internet Consortium (IIC) and the OpenFog Consortium (OpenFog) this week announced that they finalized the details to merge into a single entity.

The UK data protection regulator (the Information Commissioner's Office – ICO) launched a wide-ranging investigation into the use of personal information for political purposes following the Facebook/Cambridge Analytica affair. It resulted in the publication of a lengthy report titled 'Democracy disrupted? Personal information and political influence' in July 2018, and a fine on Facebook set at the maximum amount possible – £500,000 ($645,000).

Apple reported on Friday that the FaceTime spying bug that has been making headlines in the past days has been partially fixed, but users will have to wait until next week for a software update.

Amy Spiro is one of many Israeli journalists who recently received a direct message on her Twitter account linking to a sensational news story.The sender, using the Jewish-sounding name "Bina Melamed", directed her to a fake story falsely alleging former Israeli defence minister Avigdor Lieberman was a Russian spy.

Home remodeling and design platform Houzz informed customers this week of a data breach that involved some personal information.

New York authorities have announced the launch of an investigation into the recently disclosed FaceTime vulnerability that can be exploited to spy on users. The probe focuses on Apple’s failure to warn customers and the company’s slow response.

The Minnesota Department of Human Services says a data breach potentially exposed personal information on up to 3,000 people.

Facebook said Thursday it took down hundreds of "inauthentic" accounts from Iran that were part of a vast manipulation campaign operating in more than 20 countries.The world's biggest social network said it removed 783 pages, groups and accounts "for engaging in coordinated inauthentic behavior tied to Iran."

Microsoft-owned GitHub informed developers on Thursday that they can easily ensure that the dependencies used by their applications are always secure and up to date through an integration of its Security Advisory API with Dependabot.

Companies that sold fake social media activity have reached a settlement with the state of New York in a case that, for the first time, established such activity as illegal, the state's attorney general said Wednesday.

The State Bank of India is the latest large organization to leave a database full of personal information exposed and accessible on the internet.

Dell on Thursday announced that it has teamed up with its subsidiary Secureworks and CrowdStrike for a new endpoint security offering that includes threat prevention, detection and response services.