SecurityWeek

Apple and the US government are squaring off in an epic legal battle with wide-ranging implications for how technology firms must work with law enforcement.

Just days before the RSA Conference in San Francisco kicked off, Canadian mobile phone maker BlackBerry announced the launch of a new Professional Cybersecurity Services practice and the acquisition of UK-based cybersecurity consulting firm Encription Limited.

The developers of the point-of-sale (PoS) malware known as FighterPOS have added worm capabilities to their creation, and the number of infections detected in the United States has increased over the past period.

Google on Thursday announced the public launch of Project Shield, an initiative aimed at protecting news sites from distributed denial of service (DDoS) attacks, for free.

The Pentagon plans to spend an additional $900 million in the coming year to boost cyber defense measures, Defense Secretary Ashton Carter said Thursday. US officials are still reeling from last year's revelation that personal data from some 20 million federal employees, contractors and others had been hacked in a massive breach at the Office of Personnel Management.

Mozilla has decided to allow Symantec to issue nine new SSL certificates signed using the SHA-1 cryptographic hash function to payment processor Worldpay after the company failed to upgrade devices in time.

Apple has patched more than 60 vulnerabilities with the release of Apple TV 7.2.1, including flaws that can lead to arbitrary code execution, application crashes, and information disclosure.

Apple on Thursday urged a federal court to toss out an order that the company help the FBI hack into an iPhone used by a shooter in the San Bernardino attack, arguing that it was a "dangerous power." The legal response was fired in what promised to be a landmark case pitting national security against personal privacy.

Palo Alto Networks has released updates for PAN-OS, the operating system of its enterprise security platform, to address several vulnerabilities, including ones rated “critical” and “high” severity.

In its seventh annual Mandiant M-Trends report, FireEye-owned Mandiant said that organizations are improving on the time it takes to detect a security breach. While the positive news on improved breach detection is exciting in the current days of cyber doom and gloom, Mandiant also found an increase in the number of destructive attacks hitting organizations.

FBI Director James Comey on Thursday defended his agency's efforts to force Apple to help unlock an iPhone used by one of the San Bernardino attackers, as he warned of risks of unbreakable encryption. "The San Bernardino litigation is not about us trying to send a message or establish some kind of precedent," Comey told lawmakers at the House Intelligence Committee.

Cisco has released software updates for its ACE 4710 appliance to address a high severity command injection vulnerability.

Last year, 1,673 data breaches resulted in roughly 707 million data records being compromised worldwide, according to statistics from Gemalto’s Breach Level Index report.

The IoT wave is building like a thunderous tsunami, growing larger on the horizon by the day. What is missing from the conversation, however, is how large a role software plays in the IoT equation. Plugging something into the Internet does not make it work -- it just makes it vulnerable. Value is created through the associated software. In fact, we have almost reached the point where the actual product or device and the associated software become a single logical...

In response to a motion filed by the defense in the case of an alleged Silk Road 2.0 administrator, a judge has confirmed that US authorities funded Carnegie Mellon University to conduct research on the Tor anonymity network.