SecurityWeek

New York City-based manufacturing company OXO International says that hackers attempted to steal customer payment card data several times over the past couple of years.

Vulnerabilities in the IntelHD5000 kernel extension used in Apple OSX 10.13 could be exploited for privilege escalation, Cisco Talos security researchers have discovered.

FireEye on Wednesday announced that the latest version of its Email Security - Server Edition product introduces several new features designed to protect organizations against various types of threats.

Vietnam has accused Facebook of violating a new cybersecurity law by refusing to scrub anti-government content from its site, the first reprimand since the controversial bill came into effect days ago.

As we enter 2019, we’re still facing massive cyber-attacks that expose the sensitive data of millions of people and impact businesses both from a reputational and material perspective. To address these challenges, the use of a Zero Trust model has returned to the spotlight after more and more analyst firms provided their stamp of approval.

Network and endpoint security firm Sophos on Tuesday announced the acquisition of Avid Secure, a San Francisco-based company specializing in protecting public cloud environments.

A hacker managed to gain unauthorized access to Australia’s Early Warning Network (EWN) late last week, and used the service to send bogus messages to users. 

Microsoft has fixed nearly 50 vulnerabilities with its Patch Tuesday updates for January 2019, including some critical flaws affecting Edge, Hyper-V and DHCP. None of the vulnerabilities patched this month appear to have been exploited, but one of them has been publicly disclosed.

As concern over the full cyber purpose of China and its state-sponsored hackers grows, two senators have introduced a bi-partisan bill aimed at protecting U.S. technology and economic supremacy.

A team of researchers, including experts involved in the discovery of the Meltdown and Spectre vulnerabilities, have disclosed a new type of side-channel attack that targets the operating system page cache.

German authorities on Tuesday said a 20-year-old hacker had confessed to stealing and leaking private data from hundreds of politicians, including Chancellor Angela Merkel, because he was "annoyed" by some of their public statements.

The California Department of Insurance (CDI) fixed a vulnerability found on interactive.web.insurance.ca.gov on November 9, 2018 -- the same day it was reported to the department by Indian firm Banbreach. The site had been hosting an Oracle reporting server that, according to Banbreach's observations, had generated more than 24,450 reports in a 24-hour period.

Adobe’s Patch Tuesday security updates for January 2019 address only two “important” vulnerabilities in the company’s Connect and Digital Editions products.

Cyber security and application delivery solutions provider Radware on Monday announced plans to acquire bot management company ShieldSquare. 

The Next Year Will Surprise All of Us in at Least One Way or Another

German police said Tuesday they arrested a 20-year-old suspect in the case of private data stolen from hundreds of politicians, including Chancellor Angela Merkel, and published online.

Exploit acquisition firm Zerodium on Monday announced that it’s offering significantly higher payouts for many types of exploits, including up to $2 million for remote iOS jailbreaks and $1 million for vulnerabilities in popular chat applications.

The US intelligence community launched a campaign Monday to help US business defend against hacking by foreign governments like China and Russia.

Hackers managed to compromise Titan Manufacturing and Distributing’s computer system and steal customer payment card data for nearly a year.