SecurityWeek

Earlier this month, Penn State University was forced to completely disconnect a portion of its network from the Internet in response to multiple cyber attacks. The attacks that apparently emanated from China centered on Penn State’s College of Engineering and the duration of the attack stretches all the way back to September of 2012.

Kaspersky Lab has published a report detailing the botnet-assisted distributed denial-of-service (DDoS) attacks launched by malicious actors in the first quarter of 2015.

Belgium has launched an investigation into claims of widespread espionage by Germany, which is accused of helping the US spy on Berlin's closest allies in Europe, a minister said Friday.

Professional beauty supplies retailer Sally Beauty has provided an update on its investigation into the recent breach of its payment card systems.

SEARCH-LAB, a Hungary-based security testing company that specializes in embedded systems, has identified more than 50 vulnerabilities in network-attached storage (NAS) and network video recorder (NVR) products from D-Link.

Global revenues for the security software market grew more than five percent in 2014 to a total of $21.4 billion, according to industry analyst firm Gartner.

Rockwell Automation has released a patch to address a vulnerability in one of the company’s human-machine interface (HMI) products that can be exploited by malicious actors to obtain user-defined passwords.

Japan's largest mobile service provider, NTT DoCoMo, said it would replace passwords with biometric credentials on a number of its online services, in a step to move users closer to a password-free world.

Researchers at Onapsis, a firm specializing in business-critical application security, have identified two medium severity vulnerabilities in the database management system SAP HANA (High-Performance Analytic Appliance).

The responsibility for the organization suffering a data breach lies squarely with the CEO, according to a new survey examining board-level attitudes about cybersecurity.

Researchers at Trend Micro have identified a high severity vulnerability in the Android version of Apache Cordova. Updates have been released to address the security bug.

Palo Alto Networks (NYSE: PANW) announced on Wednesday that it has acquired Silicon Valley-based CirroSecure, a security startup focused on protecting Software as a Service (SaaS) applications.

Falling victim to a data breach is not getting any cheaper.

SensioLabs, the creator of the popular PHP web application framework Symfony, announced on Wednesday the availability of updates that address a security bug.

Network security firm Fortinet said on Wednesday that it has agreed to acquire Meru Networks (NASDAQ: MERU), a provider of enterprise wireless networking solutions, for roughly $44 million in cash.

The developers of the notorious Angler exploit kit are very good at integrating recently patched or zero-day vulnerabilities. Researchers reported on Monday that the cybercriminals have already added an exploit for a Flash Player flaw fixed by Adobe just two weeks ago.

Security researchers, companies and organizations have joined forces in a new non-profit global initiative whose goal is to secure smart cities.

Check Point Software Technologies announced on Tuesday the launch of a new rugged appliance designed to protect industrial control systems (ICS) against cyber threats.

Hackers stole information on 100,000 taxpayers from the online computers of the US Internal Revenue Service, the federal tax agency said Tuesday.