SecurityWeek

Hackers could have easily hijacked the email accounts of Verizon customers by leveraging a vulnerability in a FiOS Web service, a researcher revealed on Sunday.Software developer and security researcher Randy Westergren discovered the flaw while analyzing the Android app for Verizon’s fiber optic Internet, telephone and television service FiOS.

Washington - Hackers took over the Twitter accounts of the New York Post and United Press International on Friday, writing bogus messages, including about hostilities breaking out between the United States and China. One tweet posted under the UPI account quoted Pope Francis as saying, "World War III has begun."

New York - Defense lawyers for Ross Ulbricht, the alleged mastermind of online criminal enterprise Silk Road, sought to convince New York jurors on Thursday that the wrong man was in the dock.

A new provision in Canada’s Anti-Spam Legislation (CASL) prohibiting the installation of software without consent from the device’s owner came into effect on Thursday.

US President Barack Obama and British Prime Minister David Cameron, meeting in Washington on Friday, are expected to announce a newly strengthened partnership against cyber-crime. Cameron, on his fourth visit to the White House, is also the first European leader to meet with Obama since the deadly jihadist attacks in Paris, so global security will be on the agenda.

Following a year of high-profile data breaches, continued lack of guidelines for industry-government information sharing and frequent naming of attack victims as culprits by regulators, one might forgive those on the receiving end of cyber intrusions for revisiting thoughts of alternative cyber protective measures.

A new report published on Friday shows that organizations in the United States waste large amounts of money on dealing with erroneous malware alerts.

An 18-year-old was arrested this morning in the United Kingdom on suspicion of being involved in the distributed denial-of-service (DDoS) attacks launched against Sony's PlayStation Network and Microsoft's Xbox Live over Christmas.

Google has released the details of another Windows vulnerability. Microsoft planned on fixing the flaw with the January updates, but was forced to delay the patch due to compatibility issues.

New York State Attorney General Eric T. Schneiderman announced plans today to propose state legislation that would require new safeguards for the personal data of consumers.

In mid-December, malware developers launched a new version of the notorious Carberp Trojan, a threat designed to steal sensitive information from infected devices.

The Flu Bug Isn’t the Only Thing Morphing. Check Out the Latest Sandbox Evasion Techniques...

American director Michael Mann is making a grand return to theaters with "Blackhat," a timely cyber-terrorism action flick starring Chris Hemsworth.

At least two Google AdSense campaigns have been leveraged by cybercrooks to redirect the visitors of numerous websites to scam pages.The malvertising campaign started in the second half of December and lasted until a few days ago when Google finally managed to remove the offending advertisements.

For all the talk about technology, many IT professionals feel security comes down to one unavoidable factor – the end user.

A vulnerability in Apache Qpid, the open source messaging system that implements the Advanced Message Queuing Protocol (AMQP), can be exploited by an authenticated attacker to cause the message broker process to crash.

The official website of the popular source code editor Notepad++ was hacked and defaced on Monday by hacktivists protesting against the recently released “Je suis Charlie” edition of the application.

With cyber criminals increasingly targeting third-party vendors to gain backdoor access to data at large, well-protected global organizations, security professionals need to rethink their vendor risk management practices. While performing questionnaire-based vendor risk assessments is a popular practice, this method is no longer sufficient to identify emerging risks associated with third-parties.

Officials at Park 'N Fly (PNF) have confirmed that it has been victimized in a data breach affecting payment card data processed through its e-commerce website. In a statement, the company said that the data compromise has been contained but remains under investigation.

Time after time, attackers seem to find ways to get users to open an attachment.