Cisco Patches Vulnerabilities, Looking Into Heartbleed Impact
Cisco patched a quartet of vulnerabilities this week in one of its core operating systems and is looking into the potential impact of this week’s Heartbleed vulnerability.
Web Security
Google Adds Continuous Monitoring of Android Apps
Google is adding a new security feature to Android designed to scan installed apps on a device and ensure that they’re not acting maliciously or taking unwanted actions. The system is built on Google’s existing app-verification model, which warns users if there’s a potential problem with an app they’re installing. The addition to Android’s security […]
What Have We Learned: OpenSSL Heartbleed Bug
There’s nothing the Internet loves more than a fat, juicy story that it can sink its sharpened, yellowing canines into. And for the security community, the OpenSSL heartbleed vulnerability has been the equivalent of a 72-ounce steak. But an Internet-breaking vulnerability like this one is no good unless we can learn something from it (or […]
Two Netflix security engineers released an open source attack detection tool for Web applications that responds with tactics aiming to frustrate hackers.
Adobe released updates for both its Flash Player and AIR software yesterday, patching four critical vulnerabilities, including one that was exposed at last month’s Pwn2Own hacking competition.
The list of products and sites affected by the OpenSSL heartbleed vulnerability continues to grow, and as security teams implement the patch and dig into the thornier work of revoking certificates, a new problem is emerging: It’s difficult to know whether an attacker has exploited the vulnerability on a given system.
Etsy security engineer Kenneth Lee told Source Boston attendees about the online marketplace’s application security program, in particular its use of Feature Flags.
Dow Jones head of cyber risk Justine Aitel stressed the importance of softer skills in the maturity of the security industry.
Google has patched a long list of serious security vulnerabilities in Chrome, including at least 19 highly rated flaws. The company patched a total of 31 vulnerabilities in Chrome 34 and paid out more than $28,000 in rewards to researchers who reported bugs to Google. Among the security fixes in Chrome 34 are patches for […]
An recently published interactive infographic illustrates cyber threats in real time as detected by the Kaspersky Security Network (KSN).
