SecurityWeek

The National Security Agency chief said Tuesday he was "perplexed" over Twitter's move to block US intelligence from accessing data which may help thwart violent attack plots.

More than 320,000 financial records have been leaked, and while the information appears to have been stolen either from payment processor BlueSnap or its customer Regpack, neither of them admit suffering a data breach. (UPDATE: Regpack has confirmed that the leaked data comes from its systems)

Breaking down silos created by individual security products and streamlining collaboration between security and IT operations remains the biggest cyber risk management challenge facing organizations. This finding is based on feedback from leading security executives during a recent multi-city tour organized by the CISO Executive Network.

Millions of iOS users have unwittingly installed adware on their devices after downloading popular applications from a China-based third-party app store.

UnifyID Uses Machine Learning and Behavioral Characteristics to Authenticate Users

A security researcher has decided to disclose a critical zero-day vulnerability in the MySQL open-source database software after Oracle failed to release a patch in more than 40 days after being informed of its existence.

Two Israeli nationals suspected of operating a highly profitable DDoS service were arrested last week in Israel following an investigation conducted by the U.S. Federal Bureau of Investigation (FBI).

Successful Attacks Can Blend Both Cyber and Physical Elements Seamlessly to Compromise an Enterprise

Malware developers recently launched version 2.0 of GovRAT, a cyberespionage tool that has been used to target government and other types of organizations in the United States.

Researchers have demonstrated that a botnet powered by only 6,000 smartphones is enough to cause serious disruption to the 911 emergency services of a U.S. state via what is known as a telephony denial-of-service (TDoS) attack.

Google has re-architected the Mediaserver component in Android 7.0 Nougat and included other security enhancements in the new platform release.

Sophos has conducted a detailed analysis of a piece of malware designed to abuse infected computers for cryptocurrency mining and discovered that the threat leverages network-attached storage (NAS) devices to spread.

The FBI is taking "very seriously" the possibility a foreign country is trying to meddle with America's electoral process and even influence voting outcomes, the agency's director James Comey said Thursday.

The Xen Project reported on Thursday that it has patched a total of four vulnerabilities that can be exploited for privilege escalation or denial-of-service (DoS) attacks.

Starting in January 2017, Chrome will mark HTTP sites as non-secure when they transmit sensitive information such as passwords or credit card information.

Malware that slips past the Google Bouncer and becomes available via Google Play isn’t something new, but it still comes as a surprise that some malicious programs manage to infect millions through the official store before being caught.

Cisco has disclosed the existence of a vulnerability that can be exploited by remote attackers to cause some of the company’s Application Control Engine (ACE) products to enter a denial-of-service (DoS) condition.

A hacker who over the past weeks leaked tens of millions of accounts stolen from various popular services has now revealed that the Russian instant messaging service QIP (Quiet Internet Pager) also suffered a serious data breach several years ago.

Two men suspected of belonging to a network that hacked the emails of top American officials including CIA chief John Brennan were arrested Thursday in North Carolina, the authorities announced.

The White House today announced that Brigadier General (retired) Gregory J. Touhill has been named the first Federal Chief Information Security Officer (CISO).