SecurityWeek

“I’m Sorry Dave. I’m Afraid I Can’t Do That.”

A recent report from the Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) shows that while ICS vendors have been targeted by various types of malicious actors, over half of the attacks reported to the agency in 2014 involved advanced persistent threats (APTs).

Americans have been stepping up efforts to keep their data private since the revelations about vast US government surveillance programs, a survey showed Monday. The Pew Research Center survey showed 30 percent of US adults had taken steps to shield their information from unwanted attention.

As 2014 came to a close, industry experts weighed in with their predictions for 2015. A number of these predictions focused on mobile devices in the enterprise, wearables and bring your own device (BYOD) policies. Nearly three months into 2015, how are these predictions holding up? Say goodbye to EMM and MDM

Mozilla has unveiled a new, cross platform memory inspection library that can be integrated into its Mozilla InvestiGator (MIG) endpoint security system.

The developers of WPML have released an update to address several security issues that can be exploited to access website databases, delete content, and perform administrative actions.

Internet giant Yahoo announced a new way to let users to login to their account without the need for a password. With the new feature, when signing in, an on-demand password is texted directly to a user’s mobile phone, the company explained.

BlackBerry has teamed up with Samsung and IBM to develop SecuTABLET, a high-security tablet designed for the public sector and enterprises.

Yahoo said Sunday it plans to introduce "end to end encryption" for email this year to boost privacy protection for users concerned about snooping from governments or hackers.

Energy management company Schneider Electric has released a patch to address a serious vulnerability affecting Pelco DS-NVs, a video management software used worldwide in the commercial facilities industry and other sectors.

A piece of ransomware that claims to be a new variant of the notorious CryptoLocker is designed to encrypt a wide range of files stored on infected systems, including files associated with video games.

Companies are getting better at complying with payment card industry security standards, but experts believe that is only half of the story.

Recently, Benjamin Dean, Fellow for Internet Governance and Cyber-security, School of International and Public Affairs at Columbia University, wrote a very compelling piece in which he asserts - justifiably, I might add - that large corporations have little actual incentive to invest in cybersecurity.

An increasing number of organizations are in the process or have plans to move their operations to the cloud in order to benefit from the flexibility, availability, and low costs offered by cloud environments. However, many professionals are concerned about the security and compliance implications, a new report from Bitglass shows.

The Senate Intelligence Committee passed the controversial Cybersecurity Information Sharing Act, or CISA, by a vote of 14 to 1 on Thursday afternoon.