SecurityWeek

WASHINGTON - Federal Bureau of Investigation director James Comey hit out at Apple and Google on Thursday over new data-security measures designed to reassure customers wary of government prying.

Beating back the recently disclosed GNU Bourne Again Shell (Bash) vulnerability may not be as easy as some hoped.

Former convicted hacker Kevin Mitnick has entered a grey area of the security industry after launching a service that facilitates selling and buying of zero-day exploits.

New research is shining a light on the ongoing evolution of the BlackEnergy malware, which has been spotted recently targeting government institutions in the Ukraine.

Akamai's Prolexic Security Engineering and Response Team (PLXsert) has published a new threat advisory to warn enterprises of distributed denial-of-service (DDoS) attacks leveraging a toolkit dubbed "Spike."

The extremist militant group ISIS’s aggressive global use of social media is acknowledged as a strategic strength in its jihadist war of terror. Assessing ISIS’s potential to go further and do harm to the American homeland through deployment of offensive cyber operations, however, requires a broader perspective.

jQuery.com, the official website for the popular JavaScript library, has been compromised for a second time in less than a week, the organization admitted on Wednesday.

Two independent research teams have discovered that a serious vulnerability in Mozilla's Network Security Services (NSS) cryptographic library can be exploited for signature forgery attacks.

Agari, a provider data-driven security solutions that help detect email-based cyberattacks, announced this week that it has raised $15 million Series C funding round led by Scale Venture Partners (ScaleVP).

A vulnerability (CVE-2014-6271) has been discovered in the GNU Bourne Again Shell (bash) that can be exploited to execute code.

Bitdefender is warning the employees and IT administrators of small and medium-sized businesses (SMBs) to be on the lookout for fake emails designed to distribute information-stealing malware.

The FBI's Internet Crime Complaint Center (IC3) is advising companies to take a look inside as they consider security threats.

Jeffrey Massimilla has been appointed chief product cybersecurity officer of General Motors, the carmaker announced Tuesday.

High-Volume, High-Rate DDoS Attacks Increase in First Half of 2014Distributed denial-of-service (DDoS) mitigation solutions provider NSFOCUS has released a report documenting the attacks and attack trends from the first half of 2014.

Viator, the tour-booking company acquired this summer by TripAdvisor for $200 million, is notifying roughly 1.4 million customers that their payment card data and personal details might have been compromised following a data breach.

NEW YORK - The head of technology for Liberty Reserve, an alternative digital currency used in what authorities called a massive global fraud scheme, pleaded guilty Tuesday to criminal charges. US prosecutors said Maxim Chukharev, 28, of Costa Rica, pleaded guilty in New York federal court to conspiring to operate an illegal unlicensed money transmitting business.

Microsoft announced that it is launching a bug bounty program for its online services. The program is open to anyone across the globe and offers a minimum reward of $500 USD paid out according to the vulnerability's impact.

As part of its reorganization efforts, Microsoft has decided to shut down its Trustworthy Computing (TwC) unit that has been focusing on improving customers' trust in the company's commercial products.

The official website for the popular JavaScript library jQuery (jquery.com) has been compromised and abused by cybercriminals to distribute information-stealing malware, RiskIQ has reported.

New research from Cisco Systems shows the 'Kyle and Stan' malvertising network is much bigger than it first appeared. In fact, it is nine times bigger.