SecurityWeek

With the release of WordPress 4.0.1, the developers of the popular blogging tool and a content management system (CMS) have addressed several vulnerabilities, including a critical flaw that could have been exploited to compromise websites.

Vulnerabilities Expose SCADA Systems to Remote AttacksSiemens has released software updates to address two critical vulnerabilities in its SIMATIC WinCC supervisory control and data acquisition (SCADA) system, one of which could be exploited remotely by an unauthenticated attacker.

Security companies have started detecting attacks that leverage a critical remote code execution (RCE) vulnerability in Windows, which Microsoft patched last week.

Financial services already being one of America’s most highly regulated industries, recent news that Wall Street’s top trade group was calling for creation of a new inter-agency working group comprised of data security regulators at first seems like an added layer of oversight and perhaps an odd step.

NexDefense, a provider of cybersecurity solutions for automation and control systems, this week announced the availability of a new an Industrial Network Anomaly Detection (INAD) system designed to help customers detect and respond to abnormal behavior within their control system environments.

CIA Director John Brennan has ordered a sweeping internal review that could dramatically change how the country's leading spy agency is organized, officials said Thursday.

The Rovnix Trojan has started leveraging macros embedded in innocent-looking Microsoft Word documents to infect computers, researchers at Trend Micro reported on Wednesday.

A new report from Verisign on distributed denial-of-service attacks showed that the number of distributed denial-of-service [DDoS] attacks exceeding 10 Gbps grew substantially between the second and third quarters of the year.

Drupal 6.34 and Drupal 7.34 were released on Wednesday to address multiple moderately critical vulnerabilities affecting prior versions.

New research from Rapid7 has uncovered multiple vulnerabilities in the Hikvision DVR (Digital Video Recorder) devices. Researchers discovered three buffer overflow vulnerabilities in Hikvision's RTSP request handling code: CVE-2014-4878, CVE-2014-4879 and CVE-2014-4880. All three flaws can be exploited remotely without authentication to execute arbitrary code.

Enterprises Must be Committed to Keeping their IT Security Staff Highly Trained on the Current Threat Landscape and Advanced Approaches to Security.

The creators of the jQuery Validation Plugin have finally addressed a vulnerability in a demo component that was first reported to them more than three years ago.

LONDON - Britain's privacy watchdog on Thursday called on Russia to take down a site showing hacked live feeds from thousands of homes and businesses around the world and warned it was planning "regulatory action".

A new variant of the notorious information-stealing malware Citadel captures keystrokes in an effort to obtain the passwords that protect access to authentications solutions and password managers, IBM Trusteer reported on Wednesday.

A federal court has temporarily shut down and frozen the assets of two telemarketing operations accused by the Federal Trade Commission (FTC) of scamming customers out of more than $120 million by deceptively marketing computer software and tech support services.

SAN FRANCISCO - Mobile security firm Lookout on Wednesday warned that Android-powered smartphones or tablets are being targeted with malicious software that puts them at the mercy of hacker overlords.

Apple's first update for the iOS 8.1 mobile operating system includes bug fixes, increased stability and performance improvements for older devices, and also addresses several security issues.

Researchers at Core Security have disclosed multiple vulnerabilities affecting products from Advantech Corp., which provides industrial automation and embedded solutions.

With the release of the stable version of Chrome 39, Google has made several changes to improve stability and performance and has addressed numerous vulnerabilities.

Knock Knock. Who’s There? Don Quixote…Maybe Not