SecurityWeek

Researchers at Trend Micro have identified a vulnerability related to the Android manifest file that can be exploited to cause devices to crash.

Geneva - Swiss bank BCGE said Thursday hackers had stolen the personal data of thousands of clients as a newspaper reported it was being blackmailed. The Banque Cantonale de Geneve said the theft had affected several thousand of its estimated 240,000 clients but that there had been "no financial damage."

Integrated Threat Defense Provides Better and Faster Protection

Highly persistent Mac OS X firmware bootkits can be installed on Apple computers, giving attackers full control of the device, a researcher has warned.

Researchers at Trustwave have identified an attack campaign using macros that is targeting banking customers in the U.K. – yet another example of attackers leveraging the technique.

The New Year brought many things – good tidings, champagne…and new requirements for the Payment Card Industry Data Security Standard (PCI DSS).

The US intelligence chief revealed Wednesday that he dined with the North Korean general believed responsible for hacking Hollywood studio Sony, during a secret mission to Pyongyang two months ago.

Researchers of Cisco’s Talos Group have conducted an in-depth analysis of CryptoWall 2.0, a notorious piece of ransomware designed to encrypt files on infected systems and hold them for ransom.

Hackers blocked the website of German Chancellor Angela Merkel on Wednesday in an online attack claimed by a pro-Russian group opposed to the Ukrainian government. Merkel's official website and those of the government and the Bundestag lower house of parliament were temporarily inaccessible after what spokesman Steffen Seibert called a "serious attack".

With the recent release of the official Star Wars: Episode VII trailer, our attention is once again on clones. They’re the good guys for a while – until they aren’t.

Researchers at Microsoft have spotted a new variant of the Emotet Trojan, a threat used by cybercriminals to collect banking credentials.The malware variant, detected by Microsoft as Trojan:Win32/Emotet.C, was first seen in November, when malicious actors were distributing it with the aid of spam emails related to phone bills and invoices.

A new tool released on Tuesday by Twitter as open source can be used by developers to detect various types of anomalies.

I collect distributed denial of service (DDoS) stories. Part of my job is to explain to audiences and customers how a particular defensive technology can mitigate new attacks. While engineers might be drawn in by the technological talk, laymen and managers are more likely to get engaged when they are introduced to the actors in the drama.

Security experts weigh in on what they would like to see in 2015 to make their jobs wrangling users, infrastructure, and data easier.

Security company Cyphort has detected a malvertising attack that hit multiple websites, including Huffington Post and LA Weekly.

An open source piece of software made available on Sunday can be used to automate phishing attacks that target credentials for Wi-Fi networks.

Online personalized card and gift company Moonpig has shut down its mobile applications after a researcher revealed the existence of a serious vulnerability that could have been leveraged to gain access to customer information.

The Carnegie Mellon University CERT Coordination Center warned on Monday that serious vulnerabilities exist in the Unified Extensible Firmware Interface (UEFI), the BIOS replacement designed for improved software interoperability.

Alert Logic, a Houston, Texas-based provider of Security-as-a-Service solutions for cloud environments, announced on Tuesday that it has acquired Dallas-based Critical Watch for an undisclosed sum.

Inflight Internet service provider Gogo has been caught using a fake Google SSL certificate, but the company says the certificate’s role is to prevent video streaming.