SecurityWeek

Microsoft Exchange 2013 and newer versions allow an attacker to escalate privileges when performing a NT LAN Manager (NTLM) relay attack, a security researcher warns.

nCipher re-emerged from Thales as a separate stand-alone company manufacturing and marketing hardware security modules (HSMs) on January 7, 2019, and was officially launched on January 26, 2019. It had been acquired by Thales for just over $100 million in July 2008, after being founded by Alex and Nicko Nicko van Someren in 1996. 

Salt Security emerged from stealth mode on Tuesday with a solution designed to identify and prevent API attacks, and $10 million in funding.

Japan is preparing a national sweep of some 200 million network-connected gadgets for cyber-security lapses ahead of the 2020 Tokyo Olympic Games, an official said on Tuesday.

CISOs Must Clearly Demonstrate Their Value to the Business in Dollars and CentsIf you’re the typical CISO or other level of information security officer, chances are this job description sounds about right:

Medigate, a company that provides medical device security and asset management solutions, on Tuesday announced that it raised $15 million in a Series A funding round, which brings the total raised to date to over $20 million.

A critical vulnerability in Apple’s FaceTime chat application can be exploited to spy on people. The tech giant has disabled a FaceTime feature in an effort to prevent abuse until a patch is made available.

The US Justice Department on Monday unveiled sweeping charges against Chinese telecommunications giant Huawei in two cases likely to ratchet up tensions between the two superpowers -- including that of a top executive arrested in Canada on a US warrant.

When Sharyl Attkisson first began hearing clicking sounds on her phone and her computers started turning on and off in the middle of the night, she thought it was a technical glitch that could be easily fixed.

Law enforcement agencies in the United States and Europe today announced the seizure of xDedic, an underground online marketplace selling access to hacked servers and personally identifiable information. 

The seizure of several websites offering distributed denial of service (DDoS) for hire services has allowed authorities to track down and take action against people who used such websites, Europol announced today. 

The commercial Total Donations plugin for WordPress is impacted by multiple zero-day vulnerabilities that are being actively exploited in attacks, Wordfence security researchers report. 

Privacy Concerns Raised Over Facebook's Reported Plans to Merge FB Messenger, WhatsApp and Instagram

UK-based cybersecurity services provider Netcraft on Monday announced the launch of a new mobile application designed to protect users against phishing and other threats.

Despite all indications that cybersecurity is now 'top of mind' for company boardrooms, less than 50% of companies have a CISO position with a seat at the board. Boardrooms have learned all the words and they know all the notes, but they've never quite learned to sing the song.

How You Can Put the MITRE ATT&CK Matrix to Work for Your Security Operations Team

January 28 is Data Privacy Day, an international holiday whose goal is to raise awareness and promote privacy and data protection best practices.

Hackers have been scanning the Internet for Cisco Small Business routers affected by information disclosure and command injection vulnerabilities that were patched only days ago by the networking giant.