SecurityWeek

Merchant Customer Exchange (MCX), the developer of the mobile payment system called CurrentC, is notifying some users that their email addresses have been stolen by hackers.

The retail industry is an increasingly attractive target for criminals looking to steal large amounts of credit card data and quickly monetize it.

Drupal Issues “Highly Critical” Security Alert to Drupal 7 Users

Microsoft released a Fix It tool today to allow customers to disable SSL 3.0 in all supported versions of Internet  Explorer in light of a recently revealed vulnerability affecting the protocol.

The latest version of Google's Android operating system comes with some interesting new functionality features, but the company says it's also much more secure than its predecessors.

WASHINGTON - Cyber attacks might be taking a toll now, but just wait: a survey of experts says things are likely to get even worse in the US over the next decade. A majority of cybersecurity experts surveyed in a poll see a likelihood of major damage from a cyber attack in the coming years, according to a Pew Research Center report.

ICS-CERT (Industrial Control Systems Cyber Emergency Response Team) has issued a warning about an ongoing attack campaign targeting industrial control systems.

A report released by the California Office of the Attorney General on Tuesday shows that the number of residents affected by data breaches in 2013 increased considerably compared to the previous year.

RSA announced this week that Amit Yoran will take on the role as President and oversee the company’s products, marketing, sales and services. Art Coviello will remain as RSA Executive Chairman and will work with Yoran to continue driving RSA’s strategic direction, the company said.

A researcher has identified a flaw that can be exploited to trick certain ASUS wireless routers into updating their firmware to old or potentially malicious versions.

In my previous column, I discussed the “So What Factor”, which reminds us that we must know our audience.  Many of the people we interact with professionally will not be as enamored by the beauty or elegance of a technical solution as we are.  Instead, they will be more concerned with consequences, effects, and results.

A serious vulnerability has been discovered in a File Transfer Protocol (FTP) client used by many Unix-like (*NIX) operating systems, representatives of the NetBSD Project reported on Tuesday.

SEOUL - North Korea attempted to hack tens of thousands of South Korean smartphones this year, using malware disguised in mobile gaming apps, the South's spy agency said in a report submitted to parliament this week.

WASHINGTON - White House technicians recently detected suspicious activity on a computer network at the US presidential mansion, and have taken steps to resolve the issue, an official said Tuesday. The White House official said the Executive Office of the President receives daily alerts concerning numerous possible cyber threats.

A Massachusetts man has been sentenced to 21 months in prison for using information hacked from customer accounts at more than a dozen banks, brokerage firms, payroll processing companies and government agencies in a plot to steal $15 million. Robert Dubuc, 41, of Malden, Mass., previously pleaded guilty to charge of wire fraud conspiracy and conspiracy to commit access device fraud and identity theft.

A reconnaissance framework documented by researchers earlier this year has been used by multiple threat groups in watering hole attacks targeting organizations in various sectors.

WASHINGTON - The US military is looking to flex its muscles in cyberspace as a "deterrence" to hackers eyeing potential American targets, the nation's top cyber cop said Tuesday.

The Dyre malware is back to doing what it does well – targeting online bankers and stealing their user credentials in a new phishing campaign.

Cybercriminals using the Dridex banking Trojan to steal sensitive information from Internet users have changed the way they are distributing the malware, according to researchers from Palo Alto Networks.