SecurityWeek

Many financial organizations in the UK are failing to properly configure SSL (Secure Sockets Layer) certificate security of their websites, putting user’s information at risk, researchers have discovered.

An infostealer malware family identified by researchers at Zscaler ThreatLabZ leverages compromised digital certificates to avoid being detected by security products.

Security certificates from the free certificate authority (CA) Let’s Encrypt are being abused by cybercriminals in a malvertising campaign, Trend Micro has discovered.

With a Better Understanding of What the Future May Hold, Cyber Defenders Can Gain an Upper Hand With the Adversary

Romanian law enforcement authorities assisted by Europol this week arrested eight individuals suspected of being part of an international group that used malware to steal money from ATMs.

Time Warner Cable said on Wednesday that it had been contacted by the FBI who notified the cable TV and Internet service provider that its customers’ email addresses including account passwords may have been compromised.

Starting on January 1, 2016, Firefox 43 began rejecting new SSL certificates that use the SHA-1 cryptographic hash function, but the latest version of the browser (43.0.4) no longer does that.

The developers of the WordPress content management system (CMS) have released a security and maintenance update to address a vulnerability and dozens of non-security issues.

The details of several vulnerabilities in the update process of the Drupal content management system (CMS) were disclosed on Wednesday by a security firm.

Like Many Security Technologies, Access Governance Won't Directly Drive More Revenue for a Business. So How Can You Deliver a Return on Governance?

The US military will create a new way to recognize drone operators and other service members who contribute to America's fighting efforts from afar.

Security researchers have observed an increase in exploit kit (EK) activity in the beginning of this year, coupled with a series of mutations, which include spreading more malware, Heimdal Security reports.

The owners of more than 1,500 Juniper Networks firewalls still haven’t applied patches designed to address recently discovered backdoors, an Internet scan conducted by a researcher has shown.

Do You Have a Security Policy for "IoT" Gadgetry in the Office?

GATCA Elite Cyberphone Brings Boosted Security, Privacy

The latest update released by Silent Circle for its privacy-focused Blackphone 1 patches several security flaws, including a modem vulnerability that could have been exploited by malicious actors to take control of the device.

As I watched 2015 come to a close I began to develop, like many others, a list of resolutions for the new year. In 2015, the security community made its share of missteps but it’s been encouraging to see us come together, learn from our mistakes and continue to push ahead.

The SCADA StrangeLove research team has published a list of default passwords associated with industrial control system (ICS) products from various vendors.

Cloud hosting company Linode informed customers on Tuesday that it has reset their Linode Manager passwords after discovering user credentials on an external machine.

What is SDN and Why Is Traffic Visibility Important to Security?