SecurityWeek

A researcher has identified a vulnerability in the PayPal mobile API that can be exploited by an attacker to bypass a security feature that's designed to prevent account takeovers.

Data security firm Imperva released its fifth annual Web Application Attack report (WAAR) this week, a study designed track the latest trends and cyber threats facing web applications.

NEW YORK - The founder of virtual currency firm Liberty Reserve, Arthur Budovsky, was extradited Friday from Spain to face US criminal charges for operating what officials called a massive money-laundering scheme.

SAN FRANCISCO - A huge trove of evidently intercepted Snapchat images and videos were exposed online Friday, raising fears about what may be revealed in messages intended to vanish seconds after being viewed.

Following an investigation triggered by fraudulent activity on some customer payment cards, Dairy Queen has determined that cybercriminals managed to plant point-of-sale (PoS) malware at hundreds of stores.

Track-It!, the IT helpdesk solution developed by business service management software company BMC Software, is plagued by several vulnerabilities, the CERT Coordination Center at Carnegie Mellon University (CERT/CC) warned this week.

A group of security researchers, hardware hackers, hardware developers and hobbyists have set out to demonstrate that many of the tools similar to those used by the United States National Security Agency (NSA) for surveillance operations can be reproduced on a low budget with open source software and hardware components.

Researchers at Denmark-based security firm CSIS have stumbled upon a new variant of Rovnix, a piece of malware that's designed to download other threats onto infected machines.

Hackers are shaking off their reputations as nerdy, loner basement dwellers and rebranding themselves on the world stage as members of Internet age tribes with offbeat codes of conduct and capricious goals.

New Next Generation Firewall Designed to Assess, Protect, and Certify Critical Infrastructure

Adobe Digital Editions has been found to collect various pieces of information related to the e-books read by its users, a practice which raises some security and privacy concerns.

Symantec announced plans today to split into two separate, publicly traded companies – one focused on security, the other focused on information management (IM).

A new report from the (ISC)² Foundation and University of Phoenix highlights the challenges posed by the shortage of cybersecurity professionals and identifies key ways for schools and businesses to address the situation.

Microsoft is readying nine security bulletins for release next week as part of Patch Tuesday. According to their pre-patch advisory notice, three of the bulletins are rated 'critical'. Five of the remaining bulletins are considered 'important', while the final bulletin is classified as 'moderate.'

The developers of the popular malware analysis framework Cuckoo Sandbox were forced to take quick action on Tuesday after being notified of the existence of a serious vulnerability that can potentially be exploited to take control of affected systems.

Very little will get a board of directors’ attention as quickly as a cyber data breach with its attendant risks of damage to market capitalization, competitive advantage and brand reputation. Not to mention that there can be financial consequences reaching perhaps into the billions of dollars.

The Industrial Revolution changed the world forever, creating faster, better, and more efficient sectors of the economy. Drawing on parallels to this important period of history, much has been written about the “Industrialization of Hacking” which has created a faster, more effective, and more efficient sector aimed at profiting from attacks to our IT infrastructure.

IBM is just one of the many technology companies struggling to patch products affected by the GNU Bash vulnerability dubbed "ShellShock." 

Researchers have uncovered several security holes in enterprise software solutions developed by German business software giant SAP.