SecurityWeek

Remote connectivity services provider LogMeIn announced today the acquisition of Meldium, a startup that specializes in cloud-based single-sign-on (SSO), password management, and identity and access management (IAM) solutions.

A popular WordPress plugin that enables users to easily create responsive sliders is plagued by a security hole that has been actively exploited by cybercriminals, Sucuri reported on Wednesday.

2013 was a good year for cybercriminals in China, according to a new report from Trend Micro.

The CERT Coordination Center at Carnegie Mellon University (CERT/CC) has published a list of popular Android applications that fail to properly validate SSL certificates, exposing users to man-in-the-middle (MitM) attacks.

In an effort to thank researchers who responsibly disclose security vulnerabilities, Twitter has introduced a bug bounty program powered by the HackerOne platform.

Security researchers are invited to demonstrate their mobile hacking skills at the Mobile Pwn2Own competition that's scheduled to take place later this year in Japan.

TOKYO - Japan's security-conscious government admitted Thursday that details about the flight path and exact location of the prime minister's plane had been posted on the Internet for anyone to see.

In some ways, an attack against an organization is similar to a house made of cards; removing one card can cause the whole thing to collapse.

LOS ANGELES - Those behind the massive leak of naked celebrity photos that shocked the show business world could and should be prosecuted, including for child sex crimes, experts said Wednesday.

The first European edition of Suits and Spooks, the cyber security conference that brings together decision makers and influential thought leaders in the industry, will be held in London on September 12.

In recent attacks involving the Angler exploit kit, malicious code was injected directly into running processes instead of being written to the disk, a researcher reported on Sunday.

Corporate-owned device fleets have been the norm since mobile was introduced into the enterprise. Today, a number of organizations continue this tradition, only now it has morphed into COPE. Corporate-Owned, Personally Enabled policies promise the same user experience, privacy and autonomy of a personal device on a corporate-owned device.

Goodwill Industries International revealed on Tuesday that some of its customers' payment cards were compromised after the systems of a third-party vendor became infected with malware.

AVG Technologies announced its plan today to acquire Location Labs, a privately-held company focused on securing mobile devices.

Akamai Technologies has published a threat advisory to warn organizations of attacks where cybercriminals are infecting Linux servers with malware capable of launching powerful distributed denial-of-service (DDoS) attacks.

Mozilla has released Firefox 32 for Windows, Linux, Mac and Android. In addition to some new features, the latest version of the Web browser also includes fixes for several security vulnerabilities and support for public key pinning.

BeyondTrust, a provider of Privileged Account Management and Vulnerability Management solutions, has agreed to be acquired by private equity firm, Veritas Capital.

Home Depot may have become yet another major retailer to have been hit in a data breach.

Apple said on Tuesday that user accounts belonging to some celebrities were compromised in a targeted attack, but said there were no signs of a wider breach of its iCloud service.

Blanket approaches to cyber security don’t work. So many vendors rely on throwing generic signature after signature, and alert after alert without any action. These legacy solutions are stuck in the assumption that all threats are the same and easily stopped – but we know this isn’t the case.