SecurityWeek
Many ATMs Can be Hacked in Minutes: Report
Many automated teller machines (ATMs) lack adequate security mechanisms and can be compromised in minutes using various methods, according to a new report from vulnerability assessment firm Positive Technologies.
Google Helps G Suite Admins Enforce Strong Passwords
Google this week announced new features to G Suite designed to help administrators enforce rigorous password requirements and increase security.
BlackBerry to Acquire Cylance for $1.4 Billion in Cash
BlackBerry on Friday announced that it has agreed to acquire next-generation endpoint security firm Cylance for US $1.4 billion in cash.
Trend Micro, Moxa Form New IIoT Security Company
Cybersecurity firm Trend Micro and industrial networking solutions provider Moxa on Thursday announced plans to form a joint venture corporation focusing on securing industrial internet of things (IIoT) environments.
Dridex/Locky Operators Unleash New Malware in Recent Attack
The threat actor(s) behind many Dridex and Locky campaigns have been using a new Remote Access Trojan (RAT), Proofpoint security researchers warn.
Data Protection Firm Cognigo Raises $8.5 Million
Cognigo, a Tel Aviv, Israel-based startup focused on data protection and compliance, this week announced that it has completed an $8.5 million Series A round of funding.
Firefox Alerts Users When Visiting Breached Sites
Mozilla has added a new feature to Firefox to alert users when they visit a website that has been part of a data breach in the past.
Adversaries Take Advantage of the Seams. Let's Close Them.
Adversaries are Increasingly Masterful at Taking Advantage of Seams Between Technologies and Teams to Infiltrate Organizations
'Tis the Season for Mobile Threats
Report Shows Increase in Email Attacks Using .com File Extensions
Leesburg, VA-based anti-phishing firm Cofense (formerly PhishMe) has discovered an uptick in the use of .com file extensions in phishing emails.
GreatHorn Expands Email Security Platform
Waltham, MA-based GreatHorn has expanded its machine-learning phishing protection system into a complete email security platform. "This major new expansion of the Company's flagship solution," it announced on November 14, "addresses every potential stage of a phishing attack with integrated threat detection, protection, defense, and incident response."
OPM Security Improves, But Many Issues Still Unresolved: GAO
The U.S. Office of Personnel Management (OPM) has improved its security posture since the data breaches disclosed in 2015, but many issues are still unresolved, according to a report published this week by the Government Accountability Office (GAO).
What Does Your Cloud Strategy Include, and Are You Transitioning Securely?
Organizations Need the Right Technologies and Talent in Place to Ensure a Secure Transition to the Cloud
Congress Passes Bill Creating Cybersecurity Agency at DHS
The U.S. House of Representatives this week passed a bill that creates a new cybersecurity agency at the Department of Homeland Security (DHS).
Industrial Cybersecurity Firm Dragos Raises $37 Million
Industrial cybersecurity firm Dragos on Wednesday announced that it has raised $37 million in a Series B funding round, which brings the total raised by the company to date to over $48 million.
Researchers Disclose 7 New Meltdown, Spectre Attacks
A team of researchers has described seven new variants of the notorious Meltdown and Spectre attacks, and they claim some of these methods are not mitigated by existing patches, but Intel disagrees.
Chinese Hackers Target UK Engineering Company: Report
Recent attacks on an engineering company in the United Kingdom were attributed to a China-related cyber-espionage group despite the use of techniques usually associated with Russian threat actors.
iPhone X Exploits Earn Hackers Over $100,000
The Zero Day Initiative’s Pwn2Own Tokyo hacking competition has come to an end, with participants earning over $300,000 for disclosing vulnerabilities affecting iPhone X, Xiaomi Mi 6 and Samsung Galaxy S9 smartphones.
Cathay Apologizes Over Data Breach but Denies Cover-up
The top two executives at Hong Kong carrier Cathay Pacific on Wednesday apologized for the firm's handling of the world's biggest airline hack that saw millions of customers' data breached but denied trying to cover it up.
US Panel Warns Against Government Purchase of Chinese Tech
A congressional advisory panel says the purchase of internet-linked devices manufactured in China leaves the United States vulnerable to security breaches that could put critical infrastructure at risk.