SecurityWeek

Initially, experts believed that the recently disclosed SSL/TLS vulnerability dubbed “FREAK” doesn’t affect Windows, but Microsoft confirmed on Thursday that all supported versions of its operating system are impacted.

British authorities have arrested a 23-year-old man over a hacking attack on the US Department of Defense, one of 56 people detained in a week-long crackdown on cyber-crime, officials said Friday.

Researchers at security firms ESET and Cyphort continue to analyze the malware families believed to have been developed by a French intelligence agency. The latest threat uncovered by experts has been dubbed “Casper.”

Mandarin Oriental Hotel Group has confirmed the credit card systems at a number of its hotels in the United States and Europe have been accessed by hackers.

Point-of-sale (PoS) malware has become one of the chief weapons used by attackers to steal credit and debit card data, and now researchers at Trend Micro say they have found yet another threat to add to the list of tools in criminals' toolboxes.  

Radware, a provider of application delivery DDoS attack protection solutions, this week unveiled its latest attack mitigation platform designed to help carriers and cloud providers protect against high volume DDoS attacks.

Mozilla wants to improve the process of revoking intermediate certificates and it plans on doing so with a new feature that will be introduced in Firefox 37.The new mechanism is called OneCRL and it relies on a centralized list of revoked certificates that is pushed to the Web browser.

OpenDNS has unveiled NLPRank, a new model that can be used to detect both opportunistic phishing campaigns and advanced persistent threats (APTs) by identifying certain patterns in DNS traffic.

Researchers who identify security issues in Adobe’s Web applications can report their findings through the company’s newly launched vulnerability disclosure program powered by HackerOne.

Researchers at IBM Trusteer have come across a new banking Trojan that is designed to target the customers of Japanese financial institutions.

Identity thieves were busy during 2014, but a new study estimates that U.S. consumers actually suffered fewer losses than in the past.

48 hours Left for Early Bird Pricing for Suits and Spooks London!May 6-7, 2015 | techUK

Two security holes have been identified in ShareLaTeX, the online real-time collaborative LaTeX editor. Only one of the vulnerabilities has been addressed, but a workaround is available for the unpatched bug.

One takedown at a time, security researchers and law enforcement were able to make a dent in financial cyber-crime last year.

The Wi-Fi passwords of GoPro users could have been easily downloaded from the camera maker’s servers by leveraging a security flaw, a researcher has revealed.

The notorious Angler exploit kit has started leveraging a new technique to ensure that its malicious activities are not interrupted when the domains it uses are blacklisted, researchers at Cisco revealed on Tuesday.

FireEye this week announced a new product integration with Samsung to enhance the security of mobile devices running Samsung’s KNOX enterprise security platform.

I’m probably stating the obvious, but a brief look at security reports that summarize 2014 demonstrates that attackers, again, have the upper hand. The following summary statistics* reveal a very clear picture: • Number of successful attacks annually has increased by 144%

Chrome 41 is available for download. The latest version of Google’s Web browser brings new apps and extension APIs, stability and performance improvements, and tens of security fixes.

Researchers have released details of a vulnerability (CVE-2015-0204) that makes it possible for hackers to crack HTTPS-protected traffic by forcing vulnerable clients to downgrade to weaker crypto.