SecurityWeek

WASHINGTON - The US Postal Service said Monday hackers stole sensitive personal information from its employees in a large data breach this year, and got some customer data as well.

A group of attackers have targeted business travelers in the Asia-Pacific region with a sophisticated cyber-espionage campaign, Kaspersky Lab said today.

Incidents of data breaches continue to be on the rise. The increase was so great in 2013—62 percent – that Symantec coined it the year of the mega breach. And it isn’t just server side breaches like Target, Home Depot and JP Morgan Chase that are grabbing the headlines.

The latest version of the popular instant messaging application Pidgin (2.10.10) addresses multiple vulnerabilities, including three reported by Cisco's Talos security intelligence and research group.

Researchers at Palo Alto Networks identified a new piece of malware designed to target Mac OS X and iOS users.

In another cowardly Friday afternoon data breach disclosure, Chapel Hill, N.C.-based Central Dermatology Center said that one of its servers was breached by hackers back in August of 2012, but that it has just become aware of the breach.

THE HAGUE - A global crackdown has shut down dozens of online "dark markets" selling illegal goods and services and masking their identities using the Tor encryption network, officials said Friday. The joint operation by US and European law enforcement arrested 17 people in a massive international operation against the underground bazaars.

Researchers have identified an older variant of the recently uncovered WireLurker OS X/iOS malware which appears to have been designed to target computers running Microsoft Windows.

A study released this week shows that the number of manual account hijacking cases is small, but such incidents can be distressing to users and they can result in significant financial loss.

In America’s economic-centric society, few threats draw greater fear than disruptive cyberattacks against the U.S. financial services sector. Cybercrime is increasingly viewed as a systemic risk, posing dangers of major financial and reputational damage coupled with the threat of widespread loss of consumer confidence.

In an advisory published on Wednesday, Cisco revealed that four of its small business RV series routers are affected by multiple vulnerabilities that can be exploited by malicious actors for various purposes.

A universal cross-site scripting (UXSS) vulnerability has been identified in the Android browser that’s installed by default on many Android smartphones, researchers reported on Thursday.

SYDNEY - An Australian intelligence agency is warning that cyber-criminals will target the upcoming G20 summit in Brisbane, saying they could include state-sanctioned hackers, trade spies or activists.

A new survey shows that while data breach fears have not stopped many consumers from shopping online, widespread concern over authentication and mobile applications persists. 

“The giraffe is probably dead” was the musician’s excuse for being late to our corporate event in Johannesburg. Someone had apparently been transporting the animal under an overpass with insufficient clearance. Result: traffic jam. I’ve heard creative excuses for being tardy, but the skepticism must have shown on my face because she added, “It’s all over the Twitter!” and showed me the Twitpic on her smartphone. I couldn’t help but bark a laugh, as did many around us.

The latest version of Apple's Mac operating system, OS X 10.10 Yosemite, is plagued by a critical vulnerability that can be exploited to take over affected devices, a researcher has revealed.

Microsoft is planning to release 16 security bulletins next week as part of Patch Tuesday, including five that are rated 'critical.' The updates include fixes for Windows, Internet Explorer, Office, Exchange, .NET Framework, Internet Information Services (IIS), Remote Desktop Protocol (RDP), Active Directory Federation Services (ADFS), Input Method Editor (IME) (Japanese) and kernel mode driver (KMD).

Researchers at Bitdefender have been monitoring a data theft campaign leveraging the Rovnix Trojan and found that most of the infected computers are in the United Kingdom.