SecurityWeek

LinkedIn has disclosed the details of a recently patched clickjacking vulnerability that could have been exploited using CSS (Cascading Style Sheets) and style attributes.

The developers of Zen Cart, the popular open source shopping cart software used by over one hundred thousand websites, have released patches for several vulnerabilities, including a critical flaw that can be exploited for remote code execution.

Cisco has published an advisory to warn customers about a man-in-the-middle (MitM) vulnerability affecting over two dozen of the company’s products.

Users’ real IP addresses have been exposed by some VPN service providers that offer port forwarding, experts warned on Thursday.According to VPN company Perfect Privacy, five of nine tested service providers exposed their users’ real IP address, but others might be affected as well.

The CryptoWall 4.0 ransomware is being spread via exploit kits, with the Nuclear exploit kit (EK) being the first major crimekit to infect machines with this type of malware, Rackspace security researcher Brad Duncan has discovered.

LANDESK, a Utah-based company that provides IT and security management services, has suffered a data breach in which employee information may have been compromised, and possibly even product source code.

Online retailer Amazon on Tuesday started sending emails to some of its users, prompting them to reset their passwords, saying that they might have been compromised.

The infamous Dridex banking Trojan recently surfaced again in spam campaign runs that have managed to achieve a high infection rate, security companies ESET and Trend Micro warn.

NCC Group, a provider of IT and escrow, assurance and domain services, announced on Tuesday that has agreed to pay roughly $141.5 million (€133.25 million) to acquire Netherlands-based IT security firm Fox-IT.

A highly sophisticated piece of malware has been used by malicious actors since at least 2013 to target the point-of-sale (PoS) systems of U.S. retailers, iSIGHT Partners has warned.

The Time to Move to a Narrative-driven Model is Long Overdue

British authorities have arrested another individual as part of the investigation into the recent data breach suffered by the telecoms company TalkTalk.

Millions of Internet-of-Things (IoT) devices use the same cryptographic secrets, an oversight that exposes them to various types of malicious attacks, shows a new study by IT security consultancy SEC Consult.Hardcoded Cryptographic Keys

After news broke that Dell desktop and laptop computers include a self-signed root certificate that can be exploited for man-in-the-middle (MitM) attacks, experts found a second such certificate, along with a security issue that can be leveraged to track users.

US hotel chain Hilton revealed Tuesday that hackers stole credit card information from some of its point-of-sale computer systems.

A remote access Trojan (RAT) that managed to stay under the radar for several years has been used by malicious actors to target Chinese nationals associated with multinational corporations.

Andrei Costin presents research findings on embedded web interfaces at the DefCamp security conference in Bucharest Romania. (Image Credit: SecurityWeek) 

European, US and Australian law enforcement officials met Tuesday in the Netherlands to plan a crackdown on illegal online markets trading in everything from drugs to child pornography, Dutch prosecutors said.

Lenovo has released a new version of its System Update software to address a couple of privilege escalation vulnerabilities discovered by an IOActive researcher.Lenovo System Update, previously known as ThinkVantage System Update, is a piece of software designed to help users quickly obtain driver, BIOS and application updates for Lenovo and Think systems.

Traditional defenses have proven insufficient in protecting organizations from adversaries who are increasingly exploiting the digital shadows of organizations to launch targeted attacks. Now, more than ever, organizations are seeking to understand which actors pose a viable threat to their assets and business operations. As a result, many are taking the next step in their journey to strengthen their defenses by turning to Cyber Threat Intelligence (CTI). But what exactly is CTI?