SecurityWeek

WASHINGTON - US lawmakers Thursday advanced a measure that reins in NSA surveillance Thursday, signaling final passage of reforms aimed at ending bulk data collection could come quicker than expected.

As security organizations seek better ways to respond more quickly to insider threat security incidents, they can gain a lot of speed and effectiveness by taking a fundamental three-pronged approach. I like to call this approach the three Ds of incident response: deter, detect and detail. Each of these steps feed into each other in a cyclical manner.

WASHINGTON - US Defense Secretary Chuck Hagel will fly to Saudi Arabia, Jordan and Israel next week for talks that are expected to focus on Iran's nuclear program and Syria's civil war, officials said Friday.

Acquisition of Wurldtech Will Help GE Advance Cyber Security Efforts for Critical Infrastructure and Operations Technology

The new anti-phishing feature currently being tested in the experimental version of Google Chrome does not work as well as intended and poses security risks, researchers from PhishMe warned this week.

Symantec Corp. reported the results of its fourth quarter and fiscal year 2014 after the bell on Thursday, stating that GAAP revenue for the quarter (ended March 28, 2014) came in at $1.63 billion, down 7 percent year-over-year.

Bitly, the popular URL shortening service used to share links through social media and other means, warned on Thursday that user account credentials may have been compromised.

SAN FRANCISCO - US regulators on Thursday announced a deal with Snapchat to settle a charge that the Internet firm misled users into believing images sent over the popular phone application disappeared permanently.

Security threats do not always start with malware sneaking its way onto a computer. Sometimes, they can begin with applications downloaded knowingly by employees for business or personal reasons.

Microsoft plans to release eight security bulletins next week as part of its Patch Tuesday release. According to its Security Bulletin Advanced Notification, the company has two 'critical' bulletins on tap for next week, affecting Microsoft Server Software, Productivity Software, Windows and Internet Explorer. The remaining six bulletins are classified as 'important'.

Switching and networking vendor Cisco is warning about serious security vulnerabilities in the Cisco WebEx Players used by businesses for recording and playback of meeting recordings.In all, the company warned about five separate buffer overflow security flaws that exist in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players. 

BOGOTA - Colombia's President Juan Manuel Santos lashed out Thursday at cyber-espionage allegedly carried out by a computer expert who worked for his main rival in upcoming presidential elections.

The first SecurityWeek-branded Suits and Spooks event will happen in New York City on June 20-21. We have a packed agenda of cutting-edge topics presented by speakers who have direct experience in combating security challenges on a daily basis.

If there is a silver lining to the series of high-profile targeted attacks that have made headlines over the past several months, it is that more enterprises are losing faith in the “magic bullet” invulnerability of their prevention-based network security defense systems.