SecurityWeek

A researcher has found a way to upload potentially malicious code to Facebook's servers by hiding it inside a harmless-looking Microsoft Word document file.

The prevailing narrative for the recent devastating cyber-attack against entertainment giant Sony sounds like a script: a small country angry about a movie about to be released sends a group of elite hackers to stop the film release. But some experts don't believe that's what happened.

A top South Korean official offered Monday to hold high-level talks with North Korea in January, as Pyongyang battles growing pressure over human rights and a cyber row with the US. Ryoo Kihl-Jae, the South's unification minister in charge of North Korean affairs, said he was willing to meet in Seoul or the North's capital Pyongyang for the rare high-level talks.

The official website of the Internet Systems Consortium (ISC) was hacked just before Christmas and set up to serve malware to visitors, researchers at security firm Cyphort reported.

People who know me know that I love to ask questions. In fact, people sometimes ask me: “Why do you always answer a question with a question?” To this I reply: “Why not?”

For identifying and responsibly disclosing vulnerabilities in Google App Engine for Java, researchers at Poland-based research company Security Explorations have been rewarded by Google with a total of $50,000.

2014 was a very busy year for hackers. For those keeping a tally of data breaches, the year offered no respite.

North Korea on Saturday called US President Barack Obama a "monkey" for inciting cinemas to screen a comedy featuring a fictional plot to kill its leader, and blamed Washington for an Internet blackout this week.

According to a new market research report from MarketsandMarkets, the global Industrial Control System (ICS) Security Market is estimated to reach $8.73 billion in 2019. Estimated to be $6.18 billion in 2014, the increase represents an estimated Compound Annual Growth Rate (CAGR) of 7.2% from 2014 to 2019.

BEIJING - North Korea may be facing explosive hacking accusations, but analysts are questioning how an isolated, impoverished country with limited Internet access could wage cyber sabotage -- and many experts believe China plays a role.

The online gaming networks for Sony's PlayStation and Microsoft's Xbox consoles -- hot gifts this Christmas -- went dark in what hackers said was a coordinated attack.The disruption started Christmas Day and went into Friday, PlayStation and Xbox said on their Twitter feeds, adding that they were working to restore service.

South Korea on Thursday ruled out the possibility that a recent string of cyber-attacks on its nuclear power operator could cause a malfunction at any of the country's 23 atomic reactors.

Researchers at Trend Micro revealed details of an attack against a major Korean utility company hit by malware designed to wipe the master boot records (MBR) of compromised computers.

Sony Pictures is now streaming "The Interview", a movie that outraged North Korea by poking fun at dictator Kim Jong-Un and the isolated nation.

New research from Vanson Bourne found that more than three quarters of organizations in the United States and U.K. have suffered a domain name system (DNS) attack.

It would be hard to look back at 2014, without discussing some of the major mobile security events that occurred. From Home Depot to Walmart to Walgreens, mobile data security made headlines due to the presence of basic security flaws that put mobile data at risk.

North Korea's Internet was on the fritz for a second day Tuesday. But the US is staying silent on whether it launched a cyber attack as payback for the hacking of Sony Pictures. And in the murky world of cyber security, experts say there are several plausible scenarios for why North Korea suddenly went dark, stressing it's impossible to know exactly what happened.

Researchers with EMC's RSA Security Division have pulled back the covers from the Backoff malware in a new report.

A server that lacked two-factor authentication was the gateway hackers used to breach JPMorgan Chase this year, according to a report. 

For far too long, the conversation around cloud and security has revolved around Shadow IT, the use of cloud applications that IT doesn’t know about. The reality, however, is that 90% of corporate data will reside in the SaaS applications that are approved for business use. That’s where the attention of IT organizations should focus on – how to extend visibility, governance and protection to these SaaS applications.