SecurityWeek

The CERT Coordination Center and the Network Time Foundation announced on Monday the availability of NTP 4.2.8p9, which includes nearly 40 security patches, bug fixes and improvements.

A flaw in Office 365 could have been exploited by attackers to send out malicious emails and make them look as if they were coming from a legitimate microsoft.com address.

The U.S. Department of Defense (DoD) announced on Monday that it has created a vulnerability disclosure policy that aims to provide guidance to researchers on how to disclose security holes found in the organization’s public-facing websites.

On average, an enterprise now uses 1,427 cloud services. Seventy-one percent of these are enterprise services, with the remainder being consumer services. The average employee actively uses 36 cloud services, including nine collaboration services, six file sharing services, and five content sharing services (such as YouTube).

What’s worse than having to cook a Thanksgiving turkey? How about being forced to relegate the poor bird—or pieces of it—to a crock pot after discovering that your net-connected oven and wireless meat thermometer have both been hacked by crazy Cousin Constantine?

Oracle on Monday announced it is buying Dyn, a Web traffic management firm recently hit with a cyber attack that closed off the internet to millions of users.Business software and hardware titan Oracle did not disclose financial terms of the deal to acquire US-based Dynamic Network Services Inc, or Dyn.

US President Barack Obama on Sunday refused to say whether he was considering the dismissal of National Security Agency chief Admiral Michael Rogers, but suggested he was looking at how cyber defenses are organized.

Modern Networks Need Smart Filtering Tools that Boost Performance of Monitoring, Analytics and Security

Information security giant Symantec said on Monday that it will acquire identity protection firm LifeLock for $2.3 billion. Under the terms of the agreement, Symantec will pay $24 per share in a transaction financed with cash on hand and $750 million of new debt. 

Researchers from Cisco’s Talos Vulnerability Development Team discovered a total of four code execution flaws in the HDF5 library. The issues were reported to the developer and patched.

Mozilla this week released Firefox Focus for iOS, a privacy-focused web browser that gives users an increased level of privacy when browsing the Internet from their smartphones and tablets.

Hackers managed to obtain information from 133,000 user accounts after breaching the system used by U.K. telecommunications company Three to identify which customers are eligible for a device upgrade.

Hackers attempted to extort Michigan State University after gaining access to a database containing 400,000 student and employee records. The organization believes that only a few hundred records have actually been stolen by the attackers.

Project Zero researcher Tavis Ormandy has identified several vulnerabilities in Palo Alto Networks’ PAN-OS operating system. An attacker can combine the flaws to execute arbitrary code with root privileges.

I have the great opportunity to spend time with CSOs and IT executives to understand their cybersecurity concerns and help them map out a strategy for success.