SecurityWeek
Google, Spotify Release Open Source Cloud Security Tools
Google and music service Spotify announced last week the launch of Forseti Security, a community-driven collection of open source tools designed to improve security in Google Cloud Platform (GCP) environments.
U.S., Moscow Seek Russian Held in Greece over Bitcoin Laundering
Moscow has requested the extradition of a Russian national also wanted in the United States for laundering billions of dollars through a Bitcoin exchange he operated, a judicial source said Tuesday.
Container Security Firm Aqua Raises $25 Million
Aqua Security, a Tel Aviv, Israel-based container security startup, today announced that it has raised $25 million in Series B funding, bringing the total amount raised by the company to $38.5 million.
Ex-porn Actor German Spy Guilty of Trying to Share State Secrets
A former German intelligence agent who was also an ex-gay porn actor was Tuesday given a one-year suspended sentence for attempting to share state secrets while pretending to be a jihadist online.
CCleaner Server Was Compromised in Early July
A server distributing a version of PC utility CCleaner infected with malware might have been compromised in early July, Avast revealed.
DigitalOcean Warns of Vulnerability Affecting Cloud Users
DigitalOcean is warning customers that some 1-Click applications running MySQL have an account with the same default password across all instances, and the company says the issue affects other cloud providers as well.
New York Pushes to Regulate Credit Agencies After Equifax Breach
New York Governor Andrew Cuomo announced on Monday plans to make credit reporting firms comply with the 23 NYCRR 500 cybersecurity regulations enacted earlier this year.
Equifax Cybersecurity Failings Revealed Following Breach
Shortcomings revealed by researchers and cybersecurity firms following the massive data breach suffered by Equifax show that a successful hacker attack on the credit reporting agency’s systems was inevitable.
New Attack Fingerprints Users Using Word Documents
A newly detailed attack method leverages Microsoft Word documents to gather information on users, but doesn’t use macros, exploits or any other active content to do so, security researchers at Kaspersky Lab have discovered.
Windows 10 Users to Get Improved Privacy Controls
The upcoming Windows 10 Fall Creators Update will bring enhanced privacy controls to both consumers and commercial customers, Microsoft says.
CyberGRX Partners With BitSight to Address Supply Chain Risks
Partnership Integrates BitSight’s Security Ratings Capabilities With CyberGRX Third-Party Cyber Risk Exchange
Flaws Patched in Trend Micro Mobile Security for Enterprise
A patch released last week by Trend Micro for its Mobile Security for Enterprise product resolves several vulnerabilities, including remote code execution issues rated critical and high severity.
Microsoft Extends Office Bounty Program
Microsoft has announced an extension to its Microsoft Office Bounty Program, which is now set to run until December 31, 2017.
Threat Report Says 1 in 50 iOS Apps Could Leak Data
A new global threat report for the mobile ecosystem shows that iOS provides a bigger threat than is often perceived. While the insecurities of the Android operating system are well-documented, the report notes that 1 in 50 iOS apps used in enterprise environments could potentially leak sensitive data.
Equifax Shares More Details About Breach
Equifax has shared more details about the recent breach that affects roughly 143 million U.S. consumers, including how it discovered the unauthorized access and the number of individuals impacted by the incident in the United Kingdom.
Millions Download "ExpensiveWall" Malware via Google Play
A newly discovered Android malware that managed to infect at least 50 applications in Google Play has been downloaded between 1 million and 4.2 million times, Check Point researchers warn.
Equifax Security Chief, CIO to 'Retire' Immediately
Following the massive data breach that was disclosed on September 7, Equifax announced on Friday that Chief Security Officer Susan Mauldin and Chief Information Officer David Webb are retiring from the company effective immediately.
VMware Patches Critical SVGA Code Execution Flaw
Patches released this week by VMware address several vulnerabilities, including one rated critical, in the company’s ESXi, vCenter Server, Workstation and Fusion products.
HWP Documents and PostScript Abused to Spread Malware
A recently malware attack has been leveraging the Hangul Word Processor (HWP) word processing application and its ability to run PostScript code, Trend Micro reveals.