SecurityWeek

Nigeria's electoral commission admitted on Saturday that its website had been hacked, as the country's crucial presidential and parliamentary elections were hit by technical problems.

Schneider Electric has released software updates to address several vulnerabilities affecting the Wonderware InTouch Machine Edition 2014 and InduSoft Web Studio product lines.

Demonstrating Security ROI to Non-Technical ExecutivesWe know you get it. Today’s cyber threats require advanced security. Our traditional network and endpoint defenses are clearly outmatched and don’t stand a chance at preventing, investigating, or remediating today’s targeted attacks.

The U.S. Department of State announced on Thursday that it’s offering a total reward of $3 million for information leading to the arrest or conviction of two Russian nationals suspected of being involved in cybercriminal activities.

A serious security hole affecting a popular Internet gateway device used in hotels and convention centers has been closed.

The UN Human Rights Council on Thursday decided to appoint an investigator to look into violations of digital privacy rights, following revelations of large-scale cyber-snooping by Washington and others. The council, which counts the United States among its 47 members, adopted by consensus the resolution establishing the three-year watchdog position.

Cybercriminals have been leveraging a vulnerability in a popular WordPress plugin to redirect the visitors of thousands of websites to exploit kits, a researcher has warned.

Researchers at High-Tech Bridge have uncovered multiple vulnerabilities in the Web interface of pfSense that can be exploited to perform cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks.PfSense is an open source firewall/router software distribution based on the FreeBSD operating system.

PhishMe, a company that helps organizations teach security awareness by educating employees on how to identify Phishing attacks, today announced it has raised $13 million in Series B funding.

Researchers at Imperva’s Application Defense Center have found a way to leverage a 13-year-old vulnerability in the RC4 cryptographic algorithm to recover partial information from SSL/TLS-protected communications.

The catch phrase “intelligence-driven security” has never sat particularly well with me. Those who have read my pieces or have heard me speak may find this statement a bit surprising. The regular reader knows that I believe strongly in intelligence as a component of a successful and mature security program. Among its many virtues, intelligence improves detection, informs decision-making, and accelerates response.

North Korea on Thursday denied involvement in cyber-attacks on South Korea's nuclear power plant operator, accusing Seoul of fabricating a story to shift the blame for high cross-border tensions.

Cisco has released security updates to address a total of 16 vulnerabilities affecting Cisco IOS and IOS XE software.Cisco IOS is an operating system that runs on most Cisco routers and current switches, and functionality for routing, switching, internetworking and telecommunications.

Cybercriminals in Asia are taking advantage of smartphones and mobile malware to rake in significant profits through sextortion schemes, a report from Trend Micro has found.

The House Intelligence Committee introduced legislation Tuesday to provide liability protection for companies that share threat intelligence information with one another or the federal government.

With just over 100 days left until Windows 2003 server will no longer be supported by Microsoft, many organizations are still not prepared to migrate to a more recent server platform, a survey by Bit9+Carbon Black has found.

A new report from Akamai Technologies names China as the top source of attack traffic on the Web.

Big US technology firms joined a coalition of activists Wednesday urging Congress to pass a law scaling back government surveillance ahead of key deadline.

Hacking and data breaches have become a painful reality for businesses of all sizes and from all industries. Attackers have perfected the art of finding the weak links in an organization, and exploiting them to infiltrate the organization and steal their most important assets.

IT security solutions provider Secunia today published its annual vulnerability review. The report provides facts and details on the security flaws uncovered in 2014.