SecurityWeek

Security solutions vendor Mocana has taken somewhat of a sidestep from its focus as a provider of embedded device and mobile security solutions, and has released what it calls a highly secure drop-in replacement for the widely adopted OpenSSL stack for Apache Web servers.

Cisco released on Tuesday its Midyear Security Report which analyzes threat intelligence and cybersecurity trends for the first half of 2014.

Pre-release notes published by Apple for OS X Mavericks 10.9.5 and Yosemite Developer Preview 5 are informing developers that they might have to re-sign their apps if they don't want Apple's Gatekeeper anti-malware feature to block them.

CrowdStrike, a security firm focused detection and mitigation of targeted attacks, today announced the launch of a new threat intelligence exchange platform that facilitates the access and exchange of threat intelligence between vendor partners.

Target Provides Update on Costs Related to Data Breach 

Bitglass, a Silicon Valley-based provider of enterprise data protection solutions, today announced that it has secured $25 million in a Series B funding round. The new injection of capital brings Bitglass’ total funding to date to $35 million, and will be used to expand sales, marketing and technology development of Bitglass’ data protection solution, the company said.

An Australian security researcher has uncovered a bug that provided him access to an unsecured administration panel for an internal content management system (CMS) used by staff at Yahoo. The issue, which could have reportedly allowed an attacker to gain a foothold into part of the company's network, has been addressed. 

An attack targeting Google Android users in Europe with a new variant of a remote access tool has taken an ironic twist - the malware at the center of it is posing as a legitimate security program. According to McAfee researcher Carlos Castillo, an email spam campaign was spotted in Poland distributing a version of the SandroRat with the name 'Kaspersky_Mobile_Security.apk.

A large number of mobile applications are affected by a series of vulnerabilities in the Android platform of Apache Cordova, researchers at IBM Security Systems reported on Tuesday.

BEIJING - Chinese authorities are investigating two Canadians for alleged espionage, state media reported Tuesday, a week after Canada accused Beijing of "state-sponsored" hacking. "Two Canadian nationals are under investigation for suspected theft of state secrets about China's military and national defense research," the state-run Xinhua news agency said.

Cisco Systems has patched a vulnerability affecting multiple products that could allow an attacker to intercept traffic. The vulnerability involves the Open Shortest Path First (OSPF) Routing Protocol Link State Advertisement (LSA) database.

Mobile app risk management solutions provider Appthority has analyzed 400 of the most popular free and paid applications for Android and iOS devices and presented the results in a report released on Monday.

Researchers at anti-malware solutions provider G Data Software have analyzed a remote administration tool (RAT) that's capable of using popular webmail and other types of services for command and control (C&C) communications.

Disrupting a network is one thing; maintaining access and controlling computers is another.

P.F. Chang's China Bistro has been investigating a breach involving its payment card processing system since the US. Secret Service alerted the company of a possible compromise back on June 10, 2014.