SecurityWeek

The WordPress SEO by Yoast plugin is plagued by a blind SQL injection vulnerability that can be exploited to execute arbitrary SQL queries on a targeted website.

A problematic signature file pushed out by Panda Security on Wednesday caused some legitimate files to be detected as malicious and moved to quarantine.

Financial services and communications company Western Union has launched a public bug bounty program via the Bugcrowd platform. Researchers who identify serious security issues can earn up to $5,000 per bug.

Researchers at Kaspersky Lab pulled back more of the layers covering the activities of the Equation Group today with the release of details about the EquationDrug platform.

Web performance and security solutions provider CloudFlare announced on Tuesday the availability of a new service designed to protect DNS nameservers against distributed denial-of-service (DDoS) attacks.

IBM researchers discovered a flaw in Dropbox's Android SDK which can leave mobile users vulnerable to attack.

A new Android Trojan spotted by researchers at Kaspersky Lab uses some clever techniques to silently subscribe victims to premium services.The threat, detected by Kaspersky as Trojan-SMS.AndroidOS.Podec, is still under development, but it’s already capable of carrying out a wide range of tasks.

Access to the personal email server used by former U.S. Secretary of State Hillary Clinton was not encrypted or authenticated by a digital certificate for the first three months of her term, research from security firm Venafi has found.

Intel Security (fomerly McAfee) has announced a security platform designed to protect both new and legacy infrastructure within the electric power grid.

Elastica, a San Jose, Calif.-based provider of cloud application security solutions, today announced that it has closed a series B funding round with an investment of $30 million.

The average large global enterprise has about 2,400 unsafe apps installed on the mobile devices in its environment, according to a new Veracode study.

MyBB’s official Twitter profile and a staff member’s accounts were hijacked in late January. The developers of the popular open source forum software have now provided details on the incident.

As cliché as the saying is, it is quite true that we live in a global world. It’s not uncommon for a large enterprise to operate in 100 countries or more. Many of us routinely work together with and collaborate with people across several continents. As businesses have gone global, their respective security operations programs need to be global as well.

A Japanese tourism agency said Wednesday its website was hijacked by hackers who displayed a message purportedly from the Islamic State (IS) group, less than two months after the group claimed to have beheaded two Japanese hostages.

One of the security bulletins released by Microsoft on Tuesday addresses a vulnerability that should have been patched since August 2010.

American college football, played by amateur (non-paid) students, is a big business. The top tier of teams alone reported $3.2 billion in revenue in the latest accounting.

Microsoft released a fix for the FREAK vulnerability today as part of a massive Patch Tuesday security update.

Enterprise security firm Blue Coat Systems announced on Tuesday that it has agreed to be acquired by private equity firm Bain Capital for roughly $2.4 billion.

Web hosting provider DreamHost has issued its first ever transparency report to show off how frequently the company did not comply with government requests.