SecurityWeek

A few weeks ago, Morgan Stanley fired an employee for accessing client information and publicly posting some of it on the Internet. The incident served as a reminder that sometimes the one who will do you harm doesn't have to break in - he or she is already seated at your table.

Some mobile applications are making real-life games of hide-and-go-seek a whole lot easier, according to research presented recently at the ShmooCon 2015 security conference.

A serious cross-site scripting (XSS) vulnerability plaguing the Google Apps administrator console was patched by the search giant a few months ago.

Israeli police on Wednesday arrested a man suspected of hacking into the computers and stealing the work of international recording artists including Madonna, police said. A law enforcement source told AFP that the investigation was linked to a complaint filed by a local representative of the US star, although no names were mentioned in an official police statement.

For quite a few years, enterprise IT departments have commonly addressed network security by leveraging Intrusion Prevention Systems (IPS). As we continue the discussion from my previous column (about the paradigm shift needed for designing security for the Operational Technology/OT environment vs.

Application networking solutions provider A10 Networks unveiled on Tuesday a new version of the Advanced Core Operating System (ACOS) platform, which powers many of the company’s products.

Live Webcast: Wed., Jan. 21 at 1:00PM ET Protecting Against Fraud and Cybercrime from Mobile Devices, presented by ThreatMetrix.

Technological advances are to explode 10 times faster than even the Internet boom in the 1990s, top tech tycoons told the global Davos elite Wednesday, but also warned that security threats would be worse this year than ever.

Siemens has released firmware updates to address various security holes affecting some SCALANCE industrial switches and SIMATIC controllers.SCALANCE switch vulnerabilities

A vulnerability that can be exploited for denial-of-service (DoS) attacks and possibly even for remote code execution has been uncovered in the cryptographic library PolarSSL.

Nathan Leroux, 20, of Bowie, Maryland, has admitted taking part in an international hacking and intellectual property theft conspiracy, the FBI announced on Tuesday.

Oracle has pushed out a massive number of patches in a security update, including critical fixes for Java SE and the Oracle Sun Systems Products Suite.

There is a scene in the movie "A Bronx Tale" where Robert De Niro's character says that there is nothing worse in life than wasted talent. In the world of IT, that quote could be changed to say there is nothing worse than money wasted on unimplemented security.  

By all accounts 2014 proved to be another monstrous year for security breaches. At times it seemed we couldn’t go a week without another company falling victim to the monetary ambitions of a cybercriminal, or the political agenda of a nation.

The computers of gamers in Taiwan and other Asian countries might have been infected with a piece of malware after cybercriminals managed to compromise official installers and updates for a couple of popular online games.

Chinese authorities are accused of launching a man-in-the-middle (MitM) attack against customers of Microsoft’s email service Outlook.

Two vulnerabilities that could potentially be exploited for arbitrary code execution exist in libavcodec, a free and open-source audio/video codecs library used by several popular media players.

Internet domain registrar GoDaddy has rushed to fix a cross-site request forgery (CSRF) vulnerability that could have been leveraged by malicious actors to take over domains.

The gulf between reality and perception is widening, according to Cisco’s annual survey of CISOs and security executives. Nearly 75 percent of CISOs in the survey said the security tools they have in place were very, or extremely, effective, according to Cisco’s 2015 Annual Security Report, released Tuesday.

With the annual World Economic Forum meeting in Switzerland just days away, the organization and its partners have released a new framework designed to help businesses calculate the impact of cyber-threats.