SecurityWeek

Hackers Lurked Undetected Inside Electronic Payment Solutions Provider Since 2009 - Numerous Merchants Affected

WASHINGTON - A series of spectacular cyberattacks drew headlines this year, and the situation will only worsen in 2015 as hackers use more advanced techniques to infiltrate networks, security researchers said Tuesday.

BIND, the most widely used Domain Name System (DNS) software, has been updated to address several remotely exploitable vulnerabilities, the Internet Systems Consortium (ISC) announced on Monday.

Communications encrypted with the transport layer security (TLS) protocol are also vulnerable to Padding Oracle On Downgraded Legacy Encryption (POODLE) attacks, researchers said on Monday.

DB Networks, a company focused on database security solutions, today announced that it has raised $17 million in new funding led by Grotech Ventures.

Researchers at Kaspersky Lab have uncovered a new malware sample designed to target Linux operating systems. The malware has been used by the notorious advanced persistent threat (APT) group called "Turla" (also known as Snake and Uroburos).

The healthcare industry has taken its share of hits this year when it comes to cybersecurity, and healthcare insurance companies may be facing a tough diagnosis of their own.

A group which claims to have hacked Sony's servers demanded Monday that its movie studio pull a soon-to-be-released comedy depicting a fictional CIA plot to kill North Korea's leader, reports said.

NEW YORK - Microsoft argued Monday in a court brief that an order requiring it to give US prosecutors data stored in Ireland could "put all of our private digital information at risk." The brief with the US Court of Appeals in New York comes with prosecutors seeking customer emails in a narcotics probe, with the data stored in Microsoft servers in Ireland.

Benjamin Franklin said that "if you fail to plan, you are planning to fail." Few places can this been seen more keenly than in cybersecurity.

Bebe Stores, Inc., has confirmed reports that customer payment card data has been compromised after a malicious actor breached the company's payment processing systems.

Researchers at Poland-based vulnerability research company Security Explorations have identified several flaws in Google App Engine for Java, including ones that can be leveraged for a complete sandbox escape.

Researchers have uncovered a total of 20 security holes in Zenoss Core, the free, open-source version of the application, server, and network management platform Zenoss.

Cybercriminals have been using a new variant of the Neverquest malware to target the customers of financial institutions, researchers at IBM Trusteer reported on Friday.

SINGAPORE - A court on Monday jailed a 28-year-old Singaporean for two months for defacing the prime minister's office website during a rash of cyber attacks in the city-state last year.

On Sunday, Dec. 14, 2014, the first APAC edition of Suits and Spooks will take place at The Mandarin Oriental Hotel in Singapore.

North Korea denied Sunday involvement in a brazen cyber attack on Sony Pictures, but praised it as a "righteous deed" potentially orchestrated by supporters furious over a Hollywood comedy depicting a fictional CIA plot to assassinate leader Kim Jong-Un.

Researchers from Sucuri have identified a high-risk vulnerability in the WordPress Download Manager plugin that can be exploited to upload backdoors to affected websites.

The systems of entertainment giant Sony have been hacked once again, and although the full extent of the breach is not yet known, the incident will likely be added to the list of most damaging cyberattacks.