SecurityWeek

Sony Pictures organized a town hall-style meeting with staff Monday to discuss the massive cyber attack on the Hollywood studio, a day after hackers promised a big "Christmas gift."

The market for stolen identities is thriving. But it's not just individual pieces of information that are selling. According to research from Dell SecureWorks, cybercriminals are also hawking complete kits of information. For example, a scan of a working social security card, name and address can go for $250. Another $100 will get a buyer a utility bill for additional identity verification.

Mark Marmilev, the former chief technology officer of the Costa Rica-based centralized digital currency service Liberty Reserve, has been sentenced to five years in prison and ordered to pay a $250,000 fine, the U.S. Department of Justice reported on Friday.

The developers of Docker last week released new versions of the product to address several security issues, and they shared some information on the steps taken by the company to make the solution more secure.

A researcher has identified a stack buffer overflow vulnerability in Honeywell's OPOS (OLE for Retail Point-of-Sale) Suite, a solution that provides a standard programming interface for the integration of PoS hardware into retail PoS systems based on Microsoft Windows.

Sony Pictures Entertainment pressed media outlets Sunday against using data hackers may have leaked about the studio. In the letter sent to groups including The New York Times and The Hollywood Reporter, lawyer David Boies said the "stolen information" must be destroyed and should not make it to publication.

Researchers have uncovered a worm that's designed to plant backdoors on QNAP network-attached storage (NAS) devices. The malware is distributed through the exploitation of the GNU Bash vulnerability known as ShellShock.

Indian police on Saturday arrested a 24-year-old executive believed to be the handler of an influential Twitter account supporting the Islamic State group, officials said. Mehdi Masroor Biswas, employed with an Indian food conglomerate in the southern city of Bangalore, is alleged to be the handler of the Twitter account @ShamiWitness.

Researchers at Trend Micro have observed a spike in the number of Ursnif infections. The most affected countries are the United States and the United Kingdom.

The upgrade mechanism in older versions of Malwarebytes Anti-Malware and Malwarebytes Anti-Exploit is plagued by a vulnerability that can be exploited to load malicious code on affected systems.

Researchers at threat intelligence company Norse have identified a serious vulnerability in FreeBSD, the popular Unix-like operating system that's used on servers, desktop computers and embedded platforms.

Please join ThreatMetrix and SecurityWeek on Thursday, Dec. 18th, 2014 at 1PM ET for a Live Webcast.

The idea of an Information Sharing and Analysis Center (ISAC) for cyber defense by industry is a very good thing as member organizations benefit from critical incident reporting. In fact, in hard hit areas like financial services, the ISACs have become a necessity for helping businesses - and ultimately their customers - stay safer.

The popular open source intrusion prevention system (IPS) Snort has been completely rewritten and fitted with several new features, Cisco announced on Thursday.

A Romanian man was sentenced today to serve more than five years in prison for his role in an international fraud scheme involving online marketplace websites.  

LOS ANGELES - Beleaguered studio Sony Pictures apologized Thursday for racially insensitive remarks about President Barack Obama in company emails, the latest in a series of leaks that have left Hollywood reeling.

At this time of year, many of us like to surprise our family, friends, and colleagues with gifts that aren’t what they appear to be. A ring wrapped in the box your microwave came in. A sweater in a package weighted down with a few bricks. Or maybe a new suitcase that actually contains tickets for a trip. You get the picture – using deception for a pleasant surprise.

ICS-CERT has updated an advisory about ongoing attacks against critical infrastructure companies with new information about what attackers are targeting. 

A security vulnerability identified on AliExpress, the wholesale marketplace owned by the Chinese e-commerce giant Alibaba, could have been exploited by hackers to hijack merchant accounts. A different flaw could have been leveraged to gain access to buyers' details.