SecurityWeek

Researchers at Proofpoint have released an analysis of a 500,000-strong botnet used by a cybercrime ring to target banking customers in the United States and Europe. 

NEW YORK - Several US financial institutions were targeted by the same computer hackers who breached the systems of JPMorgan Chase earlier this year, sources familiar with the matter said Wednesday. While the location of the hackers was not clear, the sources told AFP that numerous intrusion attempts were made at computer systems at major banks and other institutions.

The GNU Bash vulnerability dubbed ShellShock affects a wide range of software solutions, including some industrial products developed by the German engineering and electronics giant Siemens.

Welcome to the Interactive Agenda for the 2014 ICS Cyber Security Conference! After a sell

WASHINGTON - Twitter sued the US government Tuesday, claiming its free speech rights are being violated by restrictions on its ability to disclose numbers of secret orders to hand over user data.

The Faster a Network Can Respond and Act on Intelligence, the More Effectively it Will Block the Threat

Google announced on Tuesday the availability of Chrome 38 for Windows, Linux and Mac. The latest version of the Web browser patches a total of 159 security vulnerabilities.

TAIPEI - Taiwan's premier warned Tuesday of increasing cyber attacks from China, the island's highest-ranking official to denounce attempts to "steal government secrets" despite warming cross-strait relations.

 New research from Arbor Networks reveals a significant jump in Simple Service Discovery Protocol (SSDP) reflection attacks during the third quarter of the year.  While only a few such attacks occurred during the second quarter of 2014, nearly 30,000 attacks with this source port were uncovered during Q3 alone. One of these attacks reached 124 Gbps.

Siemens has updated its SIMATIC PCS 7 product to plug a number of security vulnerabilities.

A forensic investigation into cyberattacks against ATM machines has led to the discovery of malware used to steal millions of dollars.

Outlier Security, a startup co-founded by former HBGary CEO Greg Hoglund emerged from stealth mode today with a new approach on how enterprises can detect threats targeting their endpoints.

Data belonging to customers of MBIA Inc., the largest bond insurer in the United States, was inadvertently made available online due to a misconfigured Web server.

Sophos announced today that it has acquired cloud-based mobile security firm Mojave Networks. Founded in 2011 and formerly called Clutch Mobile, San Mateo, Calif.-based Mojave has said that customers can deploy its mobile security solution in under 10 minutes and gain insight into application usage, data flow, network analytics and malicious threats.

Finland-based SSH Communications Security announced today the launch of a new governance, risk and compliance (GRC) service designed to help organizations with Secure Shell (SSH) key management in data center environments.

Threat protection firm FireEye has announced a new targeted attack protection offering for Apple’s Mac OS X and iOS platforms.

Late last month, Home Depot reported 56 million cardholders were compromised in what The New York Times called the “largest known breach of a retail company’s computer network.” To put that number in perspective, 40 million cards were compromised in the

The development team behind the Bugzilla bug-tracking software has released an update that addresses several security issues, including a critical flaw that could lead to privilege escalation.

On Monday afternoon, Yahoo told SecurityWeek that servers associated with Yahoo Games had been hacked as a result of the recently disclosed “Shellshock” vulnerability, but the company now says that its original conclusion was wrong.

AT&T is advising customers that a rogue employee illegally accessed their personal information.