SecurityWeek

Setting Objectives and Having a Clear Roadmap is the Best Path to a Successful Network Segmentation Journey

Updates released on Wednesday for Drupal 7, 8.5 and 8.6 address two potentially serious vulnerabilities that can be exploited for arbitrary code execution.

US authorities are in the "advanced" stages of a criminal probe that could result in an indictment of Chinese technology giant Huawei, a report said Wednesday.

Singapore's privacy watchdog Tuesday imposed fines of Sg$1 million ($740,000) on a healthcare provider and an IT agency over a cyber-attack that saw health records of about quarter of the population stolen.

Hacking game accounts is a popular -- and enriching -- pastime. The rise of in-game marketplaces that can be used for buying and selling game commodities has attracted hackers who break into gamers' accounts, steal their game commodities (and anything else they can find from personal data to parents' bank card details) and sell them on for cash. 

The number of US government domains for which TLS certificates were left to expire due to the government shutdown has now exceeded 130, UK-based cybersecurity solutions provider Netcraft reported on Wednesday.

In an effort to improve the security of websites, WordPress will display a warning starting in April 2019 when encountering outdated PHP versions.In December last year, the free and open-source content management system (CMS) announced that 85% of websites running WordPress 5.0 were already using PHP 5.6 or above. 

Hackers can abuse legitimate features present in industrial controllers to hijack these devices and leverage them to gain a foothold in a network, a researcher warns.

Oracle Delivers 284 Fixes With January 2019 Critical Patch Update (CPU)Oracle this week released its first set of security patches for 2019, delivering a total of 284 new security fixes across the company’s product portfolio. 

Email security solutions provider Zix on Tuesday announced that it has entered a definitive agreement to acquire AppRiver, a company that specializes in cloud-based cybersecurity and productivity services.

The founder of Huawei said Tuesday his company would refuse to disclose secrets about its customers and their communication networks, trying to lay to rest concerns the Chinese tech giant might spy for the Communist government.

A recently disclosed attack on Chilean interbank network Redbanc appears linked to notorious North Korean hacking group Lazarus, Flashpoint reports. 

Payroll Diversion Scams Attempt to Steal Employee Pay

Researchers at IoT security company ForeScout have created a piece of malware to demonstrate how malicious actors could remotely hack into smart buildings.

US authorities on Tuesday charged eight people in a scheme to profit from stolen corporate information hacked from a government database, court papers showed.

A recently published report from the United States Department of Defense (DoD) Inspector General shows that, while the Department has improved its security posture, it still faces challenges in managing cybersecurity.

Despite the growth in use and the need for security in the use of embedded devices (IoT), almost half of all businesses are unable to detect a breach in any of their devices. The situation is worse in the UK (it rises from 48% overall to almost 60%), even though the UK government introduced a code of practice for manufacturers and developers last year.

Cloud-based identity and access management (IAM) provider OneLogin announced that it has raised $100 million in growth financing. The company has now secured over $170 million in funding to date.