SecurityWeek

To better protect POS systems and innovate to improve customer satisfaction and operational efficiency, retailers need to think differently about security

Malicious Hackers Target Subscriber Information in Dow Jones BreachBusiness news and financial information provider Dow Jones & Company revealed on Friday that its systems had been breached by malicious actors who might have stolen subscriber information.

LogMeIn on Friday said that it would  acquire single-sign-on (SSO) and password management service LastPass for $125 million in cash. 

Apple Pulls Data Snooping Apps From Online Shop Apple on Friday rid its App Store of some applications that it said could snoop on people's data and posed a security threat.

Attackers have been abusing an XML-RPC method to amplify their brute force attacks against WordPress websites, experts have warned.

Brussels and Washington want "quick solutions" to the legal void left by the collapse of a transatlantic data deal on which major companies like Facebook depend, a senior EU official said Friday.

The National Science Foundation (NSF) this week announced $74.5 million in research grants to support interdisciplinary cybersecurity research.

A team of researchers has developed a tool designed to find the origin IP addresses of websites protected by cloud security providers, and the results of their experiments show that the IPs of more than 70 percent of sites are exposed.

A federal jury in Northern California on Wednesday found a journalist guilty of computer crimes for helping hackers deface the Los Angeles Times website. Matthew Keys was found guilty on computer fraud charges that carry a combined maximum punishment of 25 years in prison and $750,000 in fines, according to US media reports.

Amazon this week released a preview of Amazon Inspector, a new tool designed to analyze the behavior of applications deployed on its Amazon Web Services (AWS) to help identify potential security issues.

Microsoft has awarded a $24,000 bug bounty to a security researcher who uncovered a serious authentication vulnerability in the Live.com service.

Adobe is preparing to patch a series of critical vulnerabilities affecting the company’s Reader and Acrobat products.

A Cisco VPN product has been targeted by malicious actors looking to steal sensitive credentials and maintain access to compromised networks, according to incident response and threat intelligence company Volexity.

The breadth and depth of threat intelligence is a primary differentiating factor for security vendors is a widely held assumption in the security industry that we collectively need to disprove and change our perspective on.

A team of researchers has demonstrated that the cost of breaking the SHA1 cryptographic hash function is lower than previously estimated, which is why they believe the industry should accelerate migration to more secure standards.

A threat group believed to be operating out of Iran has created a network of fake LinkedIn profiles as part of a campaign aimed at individuals in the Middle East and elsewhere, Dell’s SecureWorks Counter Threat Unit reported on Wednesday.

The group responsible for the development of the "vigilante malware" known as Wifatch has published the project’s source code.

The need to protect your infrastructure and services from disruption is a critical priority, especially considering increasing connectivity prevalent in industrial environments. To build OT resilience, asset owners oftentimes engage with specialized consultants. These OT security researchers, testers, certification groups and consultants can work together to fulfill a holistic risk mitigation strategy.

Researchers at FireEye have been monitoring a malicious adware campaign that has affected the devices of Android users in more than 20 countries.

Users of Microsoft web applications such as Outlook or OneDrive don’t benefit from the level of privacy they may expect, a Chinese developer has discovered.