Security News

DOE invests $50 million to improve critical energy infrastructure security
2017-09-12 21:21

Today, the Department of Energy (DOE) is announcing awards of up to $50 million to DOE’s National Laboratories to support early stage research and development of next-generation tools and...

Complete and continuous cloud infrastructure protection (Help Net Security)
2017-08-29 12:45

In this podcast recorded at Black Hat USA 2017, Hari Srinivasan, Director of Product Management at Qualys, talks about the challenges involved in securing clouds, and explains how to gain complete...

Reports Suggests 'Fleeting Window' to Prevent Major Cyber Attack on Critical Infrastructure (Security Week)
2017-08-24 16:06

The National Infrastructure Advisory Council (NIAC) published a draft report this week titled Securing Cyber Assets: Addressing Urgent Cyber Threats to Critical Infrastructure (PDF). The report...

Researchers Uncover Infrastructure Behind Chthonic, Nymaim Trojans (Security Week)
2017-08-17 02:48

While analyzing malware that uses PowerShell for infection, Palo Alto Networks managed to uncover the infrastructure behind recent attacks that leveraged the Chthonic and Nymaim Trojans, along...

Dragos Raises $10 Million to Protect Critical Infrastructure From Cyber Attacks (Security Week)
2017-08-14 22:19

Dragos, a startup focused on protecting industrial control systems (ICS) and critical infrastructure from cyber threats, announced on Monday that it has raised $10 million through a Series A...

Engineering Firm Exposed Electrical Infrastructure Details: Researchers (Security Week)
2017-08-10 11:24

Misconfiguration Issues with systems operated by Texas-based electrical engineering operator Power Quality Engineering (PQE) resulted in the information of various clients being exposed to the...

How a port misconfiguration exposed critical infrastructure data (Help Net Security)
2017-08-09 21:01

Much has already been said and written about the dangers of potential cyber attacks targeting the electric/power grid. And in Ukraine, they’ve already gone from theoretical scenarios to actual...

Qualys CloudView to deliver continuous security of public cloud infrastructure (Help Net Security)
2017-07-26 12:30

Qualys announced CloudView, a new app framework in the Qualys Cloud Platform for comprehensive and continuous protection of cloud infrastructure, delivering InfoSec and DevSecOps teams a “single...

Inadequate Boundary Protections Common in Critical Infrastructure: ICS-CERT (Security Week)
2017-07-14 13:11

The assessments conducted by the U.S. Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) in 2016 showed that inadequate boundary protection has remained the most prevalent...