SecurityWeek

Researchers have analyzed the Diffie-Hellman (DHE) key exchange and they’ve come across a new vulnerability that puts a large number of online services at risk.

A serious vulnerability affecting the NetUSB kernel driver developed by Taiwan-based tech company KCodes exposes millions of routers to hack attacks, researchers have warned.According to its website, KCodes is one of the leading developers and suppliers of USB over IP solutions. The company says over 20% of world’s networking devices include KCodes technology.

Some 140 tech companies, civil liberties and privacy activists urged the White House Tuesday to pull back efforts to weaken encryption or include law enforcement "backdoors" on technology products.

The state of affairs when it comes to dealing with distributed denial-of-service attacks is not particularly rosy, according to Akamai Technologies' 'Q1 2015 State of the Internet - Security Report'. 

The chief executive of United Airlines cast doubt Tuesday on claims by a security researcher about hacking the controls of a jetliner from its entertainment system. "There are clear firewalls between a Wi-Fi system and any kind of control," United president and CEO Jeff Smisek told a US Senate hearing.

On Monday, at the IEEE Symposium on Security and Privacy taking place these days in San Jose, California, Microsoft released details on a new research project aimed at helping organizations protect data stored in the cloud.

One of the things I have observed that is missing the most in the security field is structure. Security leaders struggle to replicate successes from one enterprise to another largely because they are starting from scratch at every new turn. However, anecdotal evidence from client engagements shows that a rigid structure won’t fit all use cases which is absolutely true as each enterprise has its unique quirks and nuances that makes it just different enough to buck the pattern.

Malicious actors are using a trojanized version of PuTTY, the popular open-source Secure Shell (SSH) and telnet client, to gain access to remote computers and steal valuable data, Symantec warned on Monday.

Researchers at Fortinet's FortiGuard Labs have identified an arbitrary code execution vulnerability in IBM SPSS Statistics, the popular statistical analysis solution.

Researchers have discovered address bar spoofing vulnerabilities in the Safari and Google Chrome for Android web browsers. Cybercriminals can exploit the bugs in phishing attacks.

Oracle has released updates for its products to address the VENOM vulnerability impacting virtual environments.

Cisco reported earlier this month that the Rombertik malware attempts to destroy the master boot record (MBR) of infected devices to prevent researchers from analyzing the threat. However, Symantec says the feature is actually designed to prevent unauthorized use of the Trojan.

Scammers apparently based in Nigeria have been stealing information from various companies in the oil logistics sector, according to a report published by Panda Security.

A researcher who specializes in aircraft security admitted hacking into an airplane’s systems during a flight and successfully sending a climb command to one of the engines, according to an FBI search warrant application.

Germany's foreign intelligence agency helped the CIA track down Osama bin Laden in Pakistan where US special forces killed the al-Qaeda leader, according to a German news report published Sunday.