SecurityWeek

Attorneys general in over a dozen U.S. states announced on Thursday that they reached a $1 million settlement with Adobe Systems over the massive data breach suffered by the company in 2013.

A Florida man is the latest person to be charged in connection with alleged illegal activities associated with coin.mx, a now defunct unlicensed bitcoin exchange. Riccardo Hill, a resident of Brandon, Florida was charged with conspiring to operate an unlicensed money transmitting business. He was released Thursday on a $75,000 bond following a court appearance in Manhattan.

RiskIQ, a company that helps detect digital threats stemming from areas such as the Web, malvertising and social media, announced that it has closed $30.5 million in a Series C funding round led by Georgian Partners. 

Job-related information belonging to hundreds of thousands of individuals was exposed online after Capgemini inadvertently made public a database of Michael Page, a brand of UK-based global recruitment company PageGroup.

Governments across the world are showing a contradictory attitude towards privacy and data protection. On the one hand new legislation insists that business is minutely protective of personally identifiable information (PII), while at the same time PII must be more readily handed to law enforcement.

Researchers warn that certain types of low bandwidth distributed denial-of-service (DDoS) attacks can cause some widely used enterprise firewalls to enter a temporary DoS condition.

Just hours after Donald Trump was elected president of the United States, researchers spotted a series of election-themed spear-phishing attacks aimed at think tanks and non-governmental organizations (NGOs) in the U.S.

Hollywood sure knows how to maximize value. That’s why we have long strings of sequels, prequels and movie plot reuse that stretch across generations. “Star Wars,” “Rocky,” “A Nightmare on Elm Street” or “Harry Potter,” take your pick. Which makes me wonder how many sequels will we have to “Snowden”?

Madison County, Indiana, was the victim of ransomware last week. There is no public information on what malware was used, how the authority was infected, nor how much was demanded by the attackers -- but it does seem as if the ransom has been paid, and systems are now coming back on line.

A new file-encrypting ransomware dubbed by researchers “Telecrypt” abuses the instant messaging service Telegram for command and control (C&C) communications and to allow victims to send messages to the attackers.

Canada based Casino Rama Resort said that a hacker broke into its internal computer systems and accessed detailed company, customer, employee and vendor information. 

Russia's antitrust authority on Thursday said it had opened an investigation into Microsoft for allegedly abusing its dominance in the antivirus software market. In a statement, the Federal Anti-monopoly Service said it had taken the decision after being contacted by the Moscow-based internet security giant Kaspersky.

As announced earlier this week, the OpenSSL Project today released an update for the 1.1.0 branch to address several vulnerabilities, including a high severity denial-of-service (DoS) issue reported by a security expert at Google.

Defending your business and customers against cyber threats starts with understanding what you’re up against. That may sound pretty obvious; studying the adversary is a common practice. In sports it’s done all the time. Teams watch hours of game film of their upcoming opponents to understand strengths and weaknesses and devise winning strategies and plays. Medical professionals do this too.

In today’s world we expect flexibility without compromising security. We may need a crossover with “stow and go” seats and underfloor storage so we can turn it into a van. But we don’t expect its safety rating to drop when we change the configuration. We may need a work space that can be reconfigured into cubicles, team rooms, quite zones, and work cafes. But we assume worker safety regardless of the configuration.