SecurityWeek

Has Your Network Segmentation Approach Changed in light of new Technologies and Business Models?

Any information security professional knows that spear-phishing is effective. Cloudmark calls it "The Secret Weapon Behind the Worst Cyber Attacks", and lists 10 recent major breaches, from Target to OPM, that started with a successful spear-phish.

Security researcher Mike Olsen's recent discovery of a malicious iFrame in the embedded control code of a set of security cameras purchased from Amazon highlights one of the emerging threats to the internet of things: it is relatively easy to poison the consumer supply chain.

Google Fixes Flaws That Could Have Allowed Hackers to Hijack User AccountsA researcher got $12,500 from Google for reporting several vulnerabilities in the account recovery process that could have been exploited to change a user’s password.

A former employee of the U.S. Department of Energy (DoE) and the Nuclear Regulatory Commission (NRC) has been sentenced to 18 months in prison for trying to hack into DoE computers in an attempt to steal nuclear secrets.

Washington - Two key US lawmakers Wednesday unveiled legislation to require technology firms to help law enforcement unlock encrypted devices -- prompting a fierce outcry from the industry and privacy activists.

News via a German leak concerning European regulators' attitudes towards Privacy Shield was published last week with the headline, "EU-US Privacy Shield in big trouble, may not pass muster..." British lawyer David Flint commented, "Of course it won't pass muster; it's a political expedient and doesn't address any of the issues of the CJEU decision in Schrems." Both were right.

The FBI announced recently that it managed to hack the iPhone belonging to the San Bernardino shooter without Apple’s help and all signs pointed to Cellebrite being the mysterious outside party. However, people familiar with the matter said it was actually professional hackers who aided the agency in breaking into the Islamic terrorist's smartphone.

British Telecom (BT) said on Wednesday that it plans to hire 900 people across the globe to work in its cyber security business over the next 12 months.

SAP on Tuesday released its latest patch update for its products, which includes 19 patch notes, 10 of which had a high priority rating.

Siemens has informed customers that several of the company’s industrial solutions are plagued by a severe vulnerability in glibc, a library used in many software and hardware products.

One month after announcing that it had issued over one million certificates since opening to the public in December last year, free and open Certificate Authority (CA) Let’s Encrypt has come out of beta.

When Forrester's John Kindervag first wrote about the concept of the Zero Trust Model (ZTM) it almost seemed too paranoid. ZTM posits that attackers are so successful in penetrating networks that a network architect should consider each and every device—from the Internet, to the firewall, to the switch, to the server—to be potentially compromised.