Category: Security

Researchers have found several security flaws in popular corporate VPNs which they say can be used to silently break into company networks and steal business secrets.

Devcore researchers Orange Tsai and Meh Chang, who shared their findings with TechCrunch ahead …

A new report out today from the software security firm Veracode found that civilian federal agencies — those largely unconnected to the military or intelligence communities — rank dead last in fixing security problems in the software they build and …

IBM took nearly a million photos from Flickr, used them to figure out how to train facial recognition programs, and shared them with outside researchers. But as NBC points out, the people photographed on Flickr didn’t consent to …

The FedRAMP PMO fields a number of questions about impact levels and the security categorization of cloud services. Federal Information Processing Standard (FIPS) 199 provides the standards for categorizing information and information systems, which is the process CSPs use to …

An anonymous reader writes from a report via ZDNet:

No data encryption, no antivirus programs, no multi-factor authentication mechanisms, and 28-year-old unpatched vulnerabilities are just some of the cyber-security failings described in a security audit of the U.S.’ ballistic missile …

We have previously published reports on several data breaches that exposed personal data. One of the cases featured a MongoDB database that contained a large amount of scraped LinkedIn data, first identified as open to public access on October 5th.…

Many parents today enjoy posting about their family on social media. But along with those adorable photos, they are sharing crucial data about their children that big tech companies are harvesting.

A recent study focusing on the “datafication” of children …

Palo Alto Networks Inc. today announced that it has agreed to buy RedLock Inc., a competitor focused on securing cloud environments, in an all-cash deal worth $173 million.

The purchase is the latest in a series of nine-figure acquisitions that …

This morning Bloomberg is reporting a bombshell for hardware security. Companies like Amazon and Apple have found a malicious chip on their server motherboards. These are not counterfeit chips. They are not part of the motherboard design. These were …

Homeland Security has said it has “no reason to doubt” statements by Apple,  Amazon and Supermicro denying allegations made in a Bloomberg report published earlier this week.

It’s the first statement so far from the U.S. government on the report, …