SecurityWeek

Hackers claiming to be Islamists have hijacked hundreds of French websites since the attacks on the satirical weekly Charlie Hebdo, flooding them with jihadist propaganda.

Hackers supporting Islamic State jihadists briefly took control of the Twitter and YouTube accounts of the U.S. Central Command (CENTCOM), the Department of Defense confirmed Monday.

A new report from the Cloud Security Alliance (CSA) found that many executives and IT managers feel concerns about the security of data are a top challenge holding back cloud projects.

A worm spotted on computers in North Korea shows why the source of a cyberattack should never be determined based only on IP addresses.

ESET has published a new report focusing on Windows vulnerabilities fixed by Microsoft in 2014 and their exploitation.

A remotely exploitable buffer overflow vulnerability has been identified in one of Schneider Electric’s Wonderware solutions, ICS-CERT reported last week.

Increased Internet surveillance and tighter border checks are "urgently" needed to foil jihadist attacks of the sort that rocked Paris this week, European, US and Canadian security ministers agreed Sunday.

Olga Redmon is an attractive young professional whose resume includes experience in customer service and Microsoft Office. Her LinkedIn profile boasts 500+ connections and dozens of endorsements, all of which come from Midwestern professionals in the automotive industry. Olga’s profile picture depicts her in a tight black tank top and red lipstick.

vBulletin users who still use the vBSEO search engine optimization plugin are advised to either uninstall it or apply a patch because the software is plagued by a serious vulnerability.

Aviator, the Web browser developed by WhiteHat Security with security and privacy in mind, is is not as secure as it should be, Google engineers pointed out last week.

In late November, Sony Pictures Entertainment was hacked by a group calling itself Guardians of the Peace (GOP). What initially appeared to be another hacktivist attack, later turned out to be a sophisticated operation possibly orchestrated by a state actor.

Researchers have uncovered a DOM-based self-XSS (cross-site scripting) flaw in Microsoft’s Dynamics CRM customer relationship management solution, but the company says it doesn’t consider such issues to be security vulnerabilities.

My sister is a PHD and an RN who’s spent a 20-year career in healthcare, but she doesn't give shots or dress wounds. Even though she’s spent considerable time assisting in many heart transplants and trauma surgeries, her day-to-day duties over the last decade or so involve things like data modeling, collection, standardization, analysis and reporting.

A vulnerability has been identified in a library utilized by many manufacturing and technology companies for HART-based field devices used by industrial control systems (ICS) operators.

Many ASUS wireless routers are affected by a vulnerability that can be exploited by an attacker with access to the target’s local area network (LAN) to execute arbitrary commands.The security hole was uncovered by Joshua Drake, practice manager of Accuvant Labs’ research and development department. The flaw has been assigned the CVE identifier CVE-2014-9583.

Microsoft No Longer Making Patch Tuesday Advanced Notification Available for General Public Microsoft has decided to ditch its tradition of publicly publishing information about upcoming patches the Thursday before Patch Tuesday.

Several patches have been released today to plug eight vulnerabilities in OpenSSL. The fixes are contained within OpenSSL 1.0.1k, 1.0.0p and 0.98zd. The most serious of the bugs are classified by the OpenSSL Project as 'moderate' and could be leveraged to launch denial-of-service attacks. The remaining six issues are ranked 'low'.

Researchers at F-Secure have been been monitoring the CosmicDuke, MiniDuke and OnionDuke cyber espionage campaigns and they’ve made some interesting discoveries.

Cybercrooks have been distributing a Bitcoin mining malware with the aid of a cracked version of the Andromeda bot, Fortinet researchers reported on Wednesday.Andromeda, one of the most well-known botnets, is currently at version 2.09. However, older versions can still prove to be useful, as researchers have discovered.