SecurityWeek

Crucial national security provisions appeared likely to expire midnight Sunday as Senator Rand Paul vowed to block any last-minute votes to extend or reform the controversial program that collects telephone data on Americans.

The American man convicted of masterminding the criminal website Silk Road was sentenced in a New York court Friday to life in prison over the conspiracy that sold $200 million in drugs to customers worldwide. Ross Ulbricht was found guilty in February by a jury on seven counts of narcotics trafficking, criminal enterprise, computer hacking and money laundering.

With a key law underpinning US bulk surveillance programs set to expire, the future appears murky for the hotly contested data sweep efforts led by the National Security Agency.

Many cybersecurity experts have raised concerns after the Bureau of Industry and Security (BIS) published a proposal for the implementation of the Wassenaar Arrangement with regard to cyber weapons.

Earlier this month, Penn State University was forced to completely disconnect a portion of its network from the Internet in response to multiple cyber attacks. The attacks that apparently emanated from China centered on Penn State’s College of Engineering and the duration of the attack stretches all the way back to September of 2012.

Kaspersky Lab has published a report detailing the botnet-assisted distributed denial-of-service (DDoS) attacks launched by malicious actors in the first quarter of 2015.

Belgium has launched an investigation into claims of widespread espionage by Germany, which is accused of helping the US spy on Berlin's closest allies in Europe, a minister said Friday.

Professional beauty supplies retailer Sally Beauty has provided an update on its investigation into the recent breach of its payment card systems.

SEARCH-LAB, a Hungary-based security testing company that specializes in embedded systems, has identified more than 50 vulnerabilities in network-attached storage (NAS) and network video recorder (NVR) products from D-Link.

Global revenues for the security software market grew more than five percent in 2014 to a total of $21.4 billion, according to industry analyst firm Gartner.

Rockwell Automation has released a patch to address a vulnerability in one of the company’s human-machine interface (HMI) products that can be exploited by malicious actors to obtain user-defined passwords.

Japan's largest mobile service provider, NTT DoCoMo, said it would replace passwords with biometric credentials on a number of its online services, in a step to move users closer to a password-free world.

Researchers at Onapsis, a firm specializing in business-critical application security, have identified two medium severity vulnerabilities in the database management system SAP HANA (High-Performance Analytic Appliance).

The responsibility for the organization suffering a data breach lies squarely with the CEO, according to a new survey examining board-level attitudes about cybersecurity.

Researchers at Trend Micro have identified a high severity vulnerability in the Android version of Apache Cordova. Updates have been released to address the security bug.