SecurityWeek

A piece of malware discovered by computer-based testing solutions provider Pearson VUE on its Credential Manager system allowed attackers to access user information.

For the past several months, Dell has been shipping new desktop and laptop computers with a preloaded self-signed root certificate which, according to experts, poses serious security and privacy risks.

A piece of malicious adware dubbed “Vonteera” tricks the operating system into thinking that digital certificates from security companies are untrusted in an effort to prevent anti-malware products from blocking it.

High-profile cyber-attacks will help drive growth in the oil and gas security and service market, which is estimated to grow from $26.3 billion in 2015 to $33.9 billion by 2020, according to a report from research firm MarketsandMarkets.

A partnership between security firm Trend Micro and the United Kingdom’s National Crime Agency (NCA) resulted in the arrests of two individuals suspected of running a website that offered cybercrime services.

Belgium on Friday announced that it will become a sponsoring nation for the NATO Cooperative Cyber Defence Centre of Excellence.

A recent security audit has shown that while TrueCrypt is plagued by some vulnerabilities, the product is efficient when it comes to protecting data, particularly in cases where an encrypted disk is lost or stolen.

A security researcher said it took United Airlines nearly six months to patch a serious vulnerability that could have been exploited to access customer information and manage flight reservations.

Encryption can be a terrorist's tool. But it's also a key for those hunting attackers, and for many others.

Three and a half years after the release of version 6, the developers of the Nmap Security Scanner announced this week the availability of Nmap 7.0.0.

LinkedIn quickly addressed a persistent cross-site scripting (XSS) vulnerability found by a researcher earlier this week in the company’s official Help Center website.

A trojanized adware family is capable of automatically installing applications on infected Android devices by abusing the operating system’s accessibility features, mobile security firm Lookout warned on Thursday.

Exploit acquisition firm Zerodium is apparently trying to attract bug bounty hunters by making public the amounts of money it’s prepared to award for various vulnerabilities in popular software.

VMware has released updates for several of its products to address an information disclosure issue caused by a vulnerability in Apache Flex BlazeDS.

The official website for the World Bank’s Climate-Smart Planning Platform has been hacked by at least two malicious actors, which has led to the site’s certificate being revoked.

The tools and techniques used by malicious actors in attacks targeting European companies indicate that the group known for wreaking havoc in South Korea in 2013 might have returned.

Britain's communications intelligence agency said on Thursday it had spray-painted job adverts on London streets popular with hipsters to woo more employees with cyber skills.

Questions Security Professionals Should Ask When Evaluating Next-Generation Firewalls

The instant messaging app Telegram, created by Russian Internet guru Pavel Durov, says it has blocked dozens of accounts associated with the jihadist Islamic State group.