SecurityWeek

The focus of security is shifting from perimeter protection to network detection. Anti-virus at the perimeter is no longer enough, and the AV industry itself has long said that it should be part of a multi-layered defense. Now a major AV vendor is providing one of those additional layers with the launch of its own incident detection and response service.

Why Centralizing Enterprise Security Resources is Not a Great Idea

The lead developer of the Nuclear exploit kit is an individual located in Russia, and the group behind the crimeware makes roughly $100,000 per month, according to security firm Check Point.

Microsoft CEO Satya Nadella's transformation of the company from a staid desktop sales company into a dynamic cloud subscription company has been remarkable. By the number of enterprise users, Microsoft has become the most widely used cloud service provider in just two years. Perhaps unsurprisingly, because of its ease and ubiquity, OneDrive is the most used part of the Office 365 suite.

Just as the story of the “Panama Papers” was about to die out, we in the security community are treated to new data, some celebrities and a manifesto. The leaked data from the Mossack Fonseca breach is supposed to illuminate dark corners of international tax evaders, but the story has many mysteries around it still.

Malware authors are constantly trying to build their malicious files to remain undetected by security products and pack their malicious programs with anti-virus detection capabilities, but the newly observed "Furtim" malware is one of a kind in this regard.

VMware has released updates for several of its products to patch a couple of vulnerabilities rated critical and important.The critical vulnerability is related to how the RMI server of Oracle JRE JMX deserializes authentication credentials. A remote, unauthenticated attacker can leverage the weakness to cause deserialization flaws and execute arbitrary commands.

Google has paid out $5,000 to a bug bounty hunter who discovered a serious vulnerability in the Google Cloud Platform.Germany-based researcher Patrik Fehrenbach discovered that the Google Cloud Platform Console was plagued by a stored cross-site scripting (XSS) flaw.

Clickjacking attacks where users are tricked into enabling Android accessibility features are possible on a majority of devices, enterprise mobile security firm Skycure warned on Tuesday.

Hackers once again took a swing at the Locky distribution network and replaced the malicious payload with a benign file, researchers at F-Secure report.

Researchers at Kaspersky Lab have come across a new and improved version of an old piece of malware that allows cybercriminals to steal money and payment card data from ATMs.

A Ukrainian national has pleaded guilty to charges of hacking into databases holding unpublished company press releases to gain insider information that led to $30 million in illicit gains, officials said.

Nobody likes to admit to a breach - but when the breach involves ransomware it cannot be denied for long. Visitors cannot access public-facing systems and they they start to ask questions. This is what happened at DeKalb Health, an Auburn, Indiana-based hospital.

Starting on June 16, 2016, the old SSLv3 and RC4 security protocols will no longer be supported on Google’s SMTP servers and on Gmail’s web servers.

Updates released on Monday by Apple for OS X, iOS, iTunes, Safari, tvOS and watchOS patch tens of vulnerabilities discovered by external researchers and the company’s own security team.