SecurityWeek

Dropbox released another transparency report on Thursday and announced that moving forward, it will do so every six months in an effort to keep the public informed of its interactions with authorities.

Many users of Steam, Valve’s online gaming platform, have complained over the past few weeks about game items getting stolen, and the culprit appears to be a new piece of malware.

Cyberterrorists do it. Cybercriminals do it. China, Russia and other nation-states do it. Extremist groups do it. Government agencies, corporations and Facebook users do it. All are knowing - and in some cases unknowing - contributors to the most massive data gathering exercise in history. Many times referred to by the overused term big data.

WASHINGTON - US authorities threatened to fine Yahoo $250,000 a day if it failed to comply with a secret surveillance program requiring it to hand over user data in the name of national security, court documents showed Thursday.

Researchers at FireEye have discovered two attack campaigns being orchestrated by different groups in separate regions of China that appear to be operating in parallel.

Researchers have been monitoring attacks in which cybercriminals hijack the routers of users in Brazil in an effort to redirect them to malicious websites.

If you think there has been a rise in point-of-sale malware lately, you are not imagining things.

Veracode, a Burlington, Massachusetts-based provider of web and mobile application security testing solutions, today announced that it has closed a late-stage $40 million funding round led by Wellington Management with participation from previous investors.

There is a common misconception that in order to move to virtual security solutions, companies can, or should, replace physical security technologies they rely on to keep their networks safe today.

LightCyber, a provider of security breach detection and response solutions, has raised $10 million in a new funding round led by Battery Ventures. According to the company, the new funds will be used to expand its sales and marketing operations in the United States.

Only a small percentage of the roughly five million password and username combinations recently dumped online would have allowed someone to access Gmail accounts, according to Google. 

A team of researchers say they believe the infamous Heartbleed bug was not the target of widespread attacks before it was publicly disclosed in April.

With most cyber-attacks, the damage is done long before any corrective actions can be taken.

Adobe Flash Player 15.0.0.152, released on Tuesday, addresses a total of 12 security vulnerabilities, many of which could be exploited for code execution.

Google has announced plans to begin sunsetting the SHA-1 cryptographic hash algorithm in the upcoming version of its Chrome browser.

Microsoft issued a patch today for a vulnerability in Internet Explorer (IE) that has been targeted in attacks as part of its monthly Patch Tuesday update.

A few months after details of the Heartbleed vulnerability surfaced, OpenSSL published a document outlining the project's various objectives. One of those objectives was met on Sunday with the release of the organization's first security policy.

Building a Winning Security Program is a Process and It Takes Time to Implement All The Pieces.

RSA unveiled a new solution on Tuesday that is designed to help security teams detect and stop threats that could ultimately lead to an organizational data breach.

Sensys Networks, a company that provides integrated wireless traffic data systems, announced last week the availability of software updates that address security issues identified last year.