SecurityWeek

A recently discovered piece of Mac malware is targeting browser cookies associated with mainstream cryptocurrency exchanges and wallet service websites, as well as personal user information, Palo Alto Networks security researchers say.

Security Leaders are Finally Recognizing How Big of a Problem Credential Compromises Are

Cloud security firm Aporeto on Wednesday announced that it raised $20 million in a Series B funding round, which brings the total raised by the company to date to $34.5 million.

False positives are one of the biggest problems for security controls. In malware detection they interrupt work and divert incident response away from real issues. But in ecommerce and financial fraud detection, false positives can have a direct and serious effect on profitability. In most cases, it is a balance between high detection (more secure but with more false positives), and lower detection (less secure with fewer false positives). 

U.S. Government Announces Initiative to Disrupt Joanap Botnet Associated With North Korean Regime 

Aircraft maker Airbus on Wednesday revealed that information on some of its employees was compromised as a result of a data breach.

US charges against Chinese telecoms giant Huawei have cranked up tensions between the world's two biggest economies, but the company is already facing obstructions around the world over alleged cyber-security risks.

Mozilla this week released the stable version of Firefox 65 with privacy protection improvements, patches, and other security enhancements inside. 

A U.S. judge has rejected the settlement between Yahoo and users impacted by the massive data breaches suffered by the company, citing, among other things, inadequate disclosure of the settlement fund and high attorney fees.

Facebook paid users, including teens, to track their smartphone activity as part of an effort to glean more data that could help the social network's competition efforts, according to a new report that may raise fresh privacy concerns.

Travel search website Skyscanner announced on Wednesday the launch of a public bug bounty program with rewards of up to $2,000 per vulnerability.Skyscanner has been running a private bug bounty program, which it claims helped address over 200 vulnerabilities in its systems. The company has now decided to open its program to the public.

Bangladesh will Wednesday file a lawsuit in New York against a Philippine bank over its involvement in one of the biggest-ever cyber heists, the country's central bank governor said.

In his Time magazine article from two weeks ago, Apple CEO Tim Cook declared that people deserve privacy online. "Consumers shouldn't have to tolerate another year of companies irresponsibly amassing huge user profiles," he wrote.

Fortanix, a California-based company that specializes in encrypting data and applications, on Wednesday announced that it raised $23 million in a Series B funding round, which brings the total funding to date to $31 million.

Mimecast, a company that focuses on email security, acquired Simply Migrate (a cloud migration specialist) for an undisclosed sum on January 29, 2019. The purpose is to allow Mimecast customers to more easily migrate legacy email archives to Mimecast's modern cloud system.

A new year has arrived, and with it comes the opportunity to make all kinds of transformations to help your business. No matter how you navigated the dangerous threat landscape during the past years, it’s time for all of us in operational technology (OT) security to make firm decisions to do or not do something for the safety of our business and environment.

Russia and China are capable of disrupting critical infrastructure in the United States, and Iran is not far behind, according to the Worldwide Threat Assessment made public by the U.S. intelligence community on Tuesday.

Starting on February 1, 2019, a number of DNS software and service providers will cease implementing DNS resolver workarounds for systems that don’t follow the Extensions to DNS (EDNS) protocol. 

An Iran-linked cyber-espionage group responsible for widespread theft of data is using a broad range of custom and off-the-shelf tools, FireEye security researchers say. 

Symantec on Tuesday announced significant improvements to its endpoint security offering, including new Endpoint Protection features, and the launch of a Managed Endpoint Detection and Response (MEDR) service.