SecurityWeek

A steady stream of low-level cyber attacks poses the most likely danger to the United States rather than a potential digital "armageddon," US intelligence director James Clapper said on Thursday. US officials for years have warned of a possible "cyber Pearl Harbor" that could shut down financial networks, poison water supplies or switch off power grids.

The cost of the Target breach keeps on climbing.According to the firm's latest earnings report, the net expense of the breach stands at $162 million. 

Highly aggressive adware has been found hidden in ten Android applications hosted on Google Play, Bitdefender reported.Adware is highly common on both desktop PCs and smartphones. However, the threats discovered by the security firm stand out not just because they are aggressive, but also because they employ clever tricks to stay hidden on the infected device.

Encrypted communications solutions provider Silent Circle said on Thursday that it has agreed to buy out a joint venture that it has with Geeksphone, giving Silent Circle a 100 percent ownership stake in SGP Technologies and full ownership of the privacy and security focused “Blackphone”.

Onapsis, a firm specializing in business-critical application security, has published a total of five advisories detailing vulnerabilities found in enterprise solutions developed by SAP.

Zimperium, a provider of mobile security solutions, today announced that it has closed a Series B round of funding totaling $12 million led by the Ventures group at Australian telecommunications firm Telstra. According to the company, the new funding will be used to support its ongoing expansion and product development and help scale operations.

Advanced Evasion Techniques (AETs) - Dynamic and Constantly Evolving Network Threats

Researchers who discovered and responsibly disclosed vulnerabilities in Facebook last year were awarded a total of $1.3 million, the social media giant said on Wednesday.

Lenovo is the latest high-profile victim of a DNS hijacking attack. Hackers managed to redirect website visitors to an arbitrary page and they intercepted emails sent to Lenovo staff.

Banks could be required to beef up their online password systems under new regulations designed to avert a so-called "cyber 9/11," a top financial regulator said Wednesday.

Ottawa - Canada's electronic eavesdropping agency has amassed a huge trove of emails sent to the government, as part of its cybersecurity mandate, according to a leaked secret document Wednesday. And their retention by the Canadian Security Establishment (CSE) for days, months or years in some cases, is worrying privacy advocates.

Researchers at Microsoft, AnubisNetworks and Symantec joined forces with law enforcement to deliver a body blow to the Ramnit botnet.

ForeScout Technologies, a provider of continuous monitoring and mitigation solutions, announced on Wednesday that it has named veteran security industry executive Michael P. DeCesare as its new chief executive officer.

Google has decided to ditch single-day Pwnium competitions in favor of a year-round program that gives researchers the opportunity to get considerable rewards for hacking Chromium.

In the preceding episode we looked at some stock charts that illustrate change in value over time. A time/value series is the metric you will probably want to present most frequently, because what we're doing in security is deeply connected to events in time. It has the wonderful property of leveraging your eye and brain in a way that makes it immediately comprehensible.