SecurityWeek

The details of three high-severity vulnerabilities affecting Apple’s OS X operating system have been disclosed over the past two days by Google.Vulnerability reports containing details and proof-of-concept code were created by Ian Beer, a member of Google’s Project Zero initiative.

Security alerts can be highly useful in protecting an organization against a data breach, but inefficient alert management can have serious consequences, a new report shows.

Malware developers have used the source code of the remote access tool (RAT) Njw0rm to create two new RATs, researchers at Trend Micro reported on Thursday.

After saying early Thursday that it was investigating reports of a critical zero-day vulnerability affecting its Flash Player that is being exploited in the wild, Adobe Systems issued a secur

Researchers at Kaspersky Lab released details today of two modules used by the notorious Regin malware platform first exposed last year.

Journalist Linked to Anonymous Gets Five Years in Prison

Washington  - An email scam which targets businesses with bogus invoices has netted more than $214 million from victims in 45 countries in just over one year, an FBI task force said Thursday.

Researchers at Symantec have identified a group of attackers targeting Russian-speaking individuals since at least January 2012.

Adobe has released an out-of-band update to address a Flash Player vulnerability that has been exploited in the wild in attacks targeting older versions of the application.

A new variant of the CTB-Locker (Critroni) ransomware has been spotted in the wild by researchers at Trend Micro.

Davos, Switzerland - Imagine a world where mosquito-sized robots fly around stealing samples of your DNA. Or where a department store knows from your buying habits that you're pregnant even before your family does.

Australia-based enterprise software provider Atlassian has released updates to address a serious vulnerability affecting several of the company’s solutions.The issue, an Object-Graph Navigation Language (OGNL) double evaluation vulnerability, has been rated as critical, which indicates that it has a CVSS score ranging between 8.0 and 10.

2014 was quite the year. From the string of major data breaches leading to reputational damage, to large-scale cloud hacks creating distrust in cloud-based services, who would’ve predicted the past year would be as eventful as it was, security-wise? Well, as we enter the New Year, it’s time to reflect on these latest occurrences and consider what they may lead to in the year that lies ahead.

China's controversial telecommunications equipment maker Huawei supports the ruling Communist Party and loves the country, its CEO said Thursday, but stressed Beijing has never asked it to spy on the United States or others.

Google announced on Wednesday the release of Chrome 40 for Windows, Mac OS and Linux. The latest update for the popular Web browser (40.0.2214.91) includes a total of 62 security fixes.

While analyzing an instance of the Angler exploit kit, French security researcher Kafeine identified what appears to be an exploit for an Adobe Flash Player zero-day vulnerability.

A few weeks ago, Morgan Stanley fired an employee for accessing client information and publicly posting some of it on the Internet. The incident served as a reminder that sometimes the one who will do you harm doesn't have to break in - he or she is already seated at your table.

Some mobile applications are making real-life games of hide-and-go-seek a whole lot easier, according to research presented recently at the ShmooCon 2015 security conference.

A serious cross-site scripting (XSS) vulnerability plaguing the Google Apps administrator console was patched by the search giant a few months ago.

Israeli police on Wednesday arrested a man suspected of hacking into the computers and stealing the work of international recording artists including Madonna, police said. A law enforcement source told AFP that the investigation was linked to a complaint filed by a local representative of the US star, although no names were mentioned in an official police statement.