SecurityWeek

A US House of Representatives committee advanced a bill Thursday to scale back bulk surveillance efforts following leaks of the programs by former intelligence contractor Edward Snowden.

Researchers at ESET have identified a family of malware targeting web servers running the Linux and FreeBSD operating systems.

The PoSeidon malware may not be God of the ocean of cyber-threats in the wild, but it is linked to a recent attack detected against a popular point-of-sale vendor (PoS) in Europe, researchers said. 

Former US and Russian commanders have urged their rival governments to scrap "hair-trigger" alerts on nuclear weapons to avoid a potential atomic disaster -- especially in an age of cyber attacks.

European aviation and aeronautics giant Airbus said Thursday it would file a criminal complaint against persons unknown following German media reports it had become a target of US industrial espionage.

Researchers at High-Tech Bridge have identified several vulnerabilities in TheCartPress, an eCommerce plugin installed on more than 5,000 WordPress websites.According to experts, the plugin is plagued by security holes that can be exploited for cross-site scripting (XSS) attacks, arbitrary PHP code execution, and sensitive data disclosure.

Experts discovered that the password recovery feature on the website of Betfair, one of the world's largest online betting exchanges, was plagued by some serious security holes.

It’s important to acknowledge that “shadow IT” shouldn’t be feared. We live in an era where individual SaaS vendors maintain an increasing amount of our corporate data. And for good reasons as these cloud-based services provide organizations with near-instant access to advanced capabilities that allow teams to remain a step ahead of their competition.

An old point-of-sale (PoS) malware has been used by cybercriminals to target the customers of resorts, hotels, and casinos in North America and other parts of the world, Trend Micro has warned.

Barracuda Networks has released a firmware update for its Barracuda Web Filter solution to address a couple of SSL inspection flaws reported by Will Dormann, vulnerability analyst at the Carnegie Mellon University CERT Coordination Center.

German intelligence services spied on top French officials and the European Commission on behalf of the American spy agency NSA, according to an article to appear Thursday in Sueddeutsche Zeitung.

Ottawa - Federal police arrested a Canadian woman Wednesday accused of remotely taking over people's computers and spying on them using their own webcams.

Sixteen days might as well be a lifetime when it comes to the length of time an infection persists on a network.

Distributed denial-of-service (DDoS) attacks using the Simple Service Discovery Protocol (SSDP) continued to rise during the first quarter of 2015, according to a new report from Arbor Networks.

Google today released Password Alert, a free and open-source Chrome extension designed to protect Google and Google Apps for Work accounts against phishing attacks.

Suits and Spooks London 2015 kicks off one week from today! Our first 2-day international event will host experts in cyber warfare, intelligence, advanced persistent threats, sophisticated malware, and political issues.

Researchers at Trend Micro have spotted thousands of spam emails designed to deliver a piece of malware to organizations.

Routers from D-Link, TRENDnet and likely other vendors are vulnerable to remote code execution attacks due to a flaw in a component of the Realtek software development kit (SDK).

Managing IT risk is an essential component of the business risk management process, which has achieved broader adoption in recent years. However, with the growing number of data breaches and a whole new set of security challenges facing companies, it’s time to re-examine the definition of IT risk management.

Network-connected projectors developed by InFocus are affected by vulnerabilities that allow a remote attacker to gain unauthorized access to the device’s web interface and configuration files.