SecurityWeek

Law enforcement authorities in the United States on Friday indicted and arrested two individuals suspected of developing, marketing and selling a piece of software designed to enable unauthorized access to protected content stored on the image and video hosting website Photobucket.

A former Department of Energy employee has been indicted after attempting to hack agency computers to steal and then sell nuclear secrets to Iran, China and Venezuela, US officials said Friday.

The United States expressed concern Friday over reports China has used a powerful censorship tool dubbed "Great Cannon" to attack websites around the world.

On Tuesday, May 12, Adobe will release security updates to address critical vulnerabilities discovered in Adobe Reader and Adobe Acrobat for Windows and Mac.

Rockwell Automation has produced software updates to address a buffer overflow vulnerability affecting a component of the RSLinx Classic solution.RSLinx Classic is a comprehensive factory communication server used for Rockwell Automation networks and devices. The company says the solution is the most widely installed communication server in automation.

The source code for a Linux rootkit that leverages the infected device’s graphics processor unit (GPU) for enhanced stealthiness and efficiency has been published on GitHub.

WordPress 4.2.2 was released on Thursday to address a serious DOM-based cross-site scripting (XSS) vulnerability that has been actively exploited.

More than five percent of unique IPs visiting Google-owned websites had at least one ad injector installed, according to a new study.

Patient data can be a valuable commodity in the cyber-underworld; so much so that apparently the number of attacks targeting healthcare organizations has gone through the roof.

A US appeals court ruled Thursday that the National Security Agency's massive collection of phone records of Americans is illegal, saying it exceeds the scope of what Congress authorized.

Cisco has released updates to address a serious vulnerability in the Cisco Unified Computing System (UCS) Central software that can be exploited by remote attackers to execute arbitrary commands on affected systems.

Updates released by Apple on Wednesday for the Safari web browser address several security holes, including ones that could lead to arbitrary code execution.

Many US lawmakers and an array of interest groups want to rein in the government's surveillance programs, aware of public backlash that began with bombshell leaks two years ago. With a deadline looming less than a month away, however, consensus on how to curb data collection has proven elusive.

This January, I won a long-standing bet with my colleague, Pete Silva, about the Android Armageddon. Every year since 2010, industry pundits have been predicting an apocalypse of Android malware that would wreak havoc on the Internet, with DDoS attack bots numbering in the tens of millions. With a billion Android devices now connected to the Internet, there is certainly potential for mischief on a massive scale.

Recently, researchers at Cisco Systems identified a new piece of malware armed with sophisticated anti-bugging feature that attempts to overwrite the master boot record if the malware discovers it is being analyzed.

Lenovo has patched critical flaws in its computers that allow an attacker to compromise the System Update service.

Malicious actors are actively exploiting a DOM-based cross-site scripting (XSS) vulnerability that could potentially affect a large number of WordPress plugins and themes, Sucuri has warned.

Security firm IOActive has published an advisory detailing some vulnerabilities in electronic locks from CyberLock. The lock maker is not happy about it and even attempted to prevent the disclosure of the security bugs with a DMCA notice.

Researchers have identified several critical vulnerabilities in Hospira LifeCare patient-controlled analgesia (PCA) infusion systems, which can be exploited by a remote attacker to take complete control of affected devices.

Cybereason Raises $25 Million to Expand Threat Detection Platform