The attackers hijacked several websites related to matters of government and foreign policy, and used them to deliver malicious payloads to visitors by leveraging unpatched software flaws.
Apple released security updates Monday targeting Mac OS X 10.5 users in order to nuke both outdated versions of Adobe System's Flash Player as well as the infamous Flashback Trojan.
A California woman was sentenced Monday to five years in federal prison for her role in an international phishing operation that tried to defraud banks of more than $1 million.
Intel announced today the release of the third-generation Intel Core vPro processor platform, arming it with new security capabilities that embed security through every layer, including the silicon.
Why do security and development teams find it so difficult to collaborate? The risks to companies from insecure applications have been rising, yet this area continues to be a blind-spot.
As seen in other layered approaches from McAfee, the solution or “joint implementation” that has been developed to help protect the energy infrastructure relies heavily on their ePolicy Orchestrator. However, this time Intel is kicking-in some additional juice with its vPro hardware-based security technology and AMT.
Researchers at Trusteer have discovered a variant of Zeus with a P2P component that is targeting high profile sites such as Facebook, Google, Hotmail, and Yahoo in order to compromise debit and credit card data.
Jeremy Hammond, former LulzSec member and alleged mastermind of the Stratfor hack, pled not guilty on Monday during a brief hearing at the US District Court in Manhattan, the Associated Press reported on Monday.
In a recent survey, 67 percent of on non-cloud using SMBs said industry standards would make them more comfortable with migrating to cloud computing. Thirty-eight percent said the same about transparency.
Vaultive for Hosted Exchange encrypts data-at-rest and data-in-use within Hosted Microsoft Exchange environments, while letting enterprise IT retain control of the encryption keys.
Tucked away in a small town outside Moscow, Russia one of the world’s most prolific and effective cybercriminals works away on the next version of malicious software that will enable the theft of millions of dollars from unsuspecting victims around the world.
When it comes to security, executive management can be compared to restaurant patrons; they just want to know the perfect food and wine pairing and be assured that both are available.
“Big security data” consists of data sets that grow so massive that they become awkward to work with using the database management tools that you have on hand. A few extra gigabytes here and terabytes there, and before you know it, you've got a big security data problem.
CISPA doesn’t come close to addressing the root of the cyber security realities the country is facing. People are focusing on the information sharing as a conduit to destroy people’s privacy, which is a different argument all together from protecting our critical national communications infrastructure.
Advocates of secure development say that proponents of WAFs are pushing a technology that is simply a band-aid for applications that need to be fixed as part of the System Development Life Cycle. Here's why that's not true.
It is highly likely that in your future, one of the DNSSEC deployments you are working on will not go according to plan. At that point you’ll need to be prepared to recover from DNSSEC errors.
To get the most value from your security information you need to be correlating your data. Adding context to data gives you information. Correlation adds even more information by evaluating relationships between pieces of information.
The rapid sophistication of malware over the last several years is a byproduct of the network effect: malware writers are now able co-opt increasingly powerful end-user applications and then analyze the effectiveness of their own efforts vis-à-vis existing IT security products and share knowledge about which evasive techniques work and which ones do not.
The vulnerability represented by the BEAST shouldn't be viewed as a major crime risk, rather as just one of hundreds, if not thousands, of Internet flaws that will soon to be discovered in the near future.
Cybercrime is either getting worse or getting better. According to a new report from Microsoft's research team, we simply do not have enough verified data to support either claim. Similar to sex surveys where exaggeration can skew results.