SecurityWeek

Cybersecurity startup Aorato has published a report around the data breach suffered in 2013 by Target, which investigates some of the techniques used by the attackers to gain access to the company's networks.

The Payment Card Industry (PCI) Security Standards Council is encouraging retailers to take steps to better protect themselves from the Backoff point-of-sale (PoS) malware that has been tied to attacks on 1,000 organizations.

In the criminal courts double jeopardy prohibits anyone from being tried twice for the same crime. Innocent or guilty, the verdict stands. Prosecutors are forced to gather as much evidence as they can and determine if they have a case for conviction. They only get one chance.

NEW YORK - JPMorgan Chase said Thursday that it was cooperating with law-enforcement officials to determine the scale of reported cyber attacks against US financial institutions. The largest US bank by assets said it was not seeing any sign of unusual fraud activity.

Netflix has released two applications used by the company's security team to monitor the Web for potential threats.

Microsoft has fixed and reissued a patch released earlier this month that left some users with the infamous 'Blue Screen of Death.' The patch in question is MS 14-045, which was released earlier this month as part of the Patch Tuesday update. After customers reported problems, Microsoft advised users to uninstall the original patch, and pulled it from the Windows Update service.

NEW YORK - Hackers believed to be from Russia broke into the computer systems of JPMorgan Chase and a second US bank earlier this month, sparking a federal investigation, US media reported Wednesday.

A major online advertising company has been serving malicious ads on several high-profile websites, Fox-IT reported on Wednesday.

The IEEE (Institute of Electrical and Electronics Engineers) Center for Secure Design has published some advice to help software developers dodge common mistakes that compromise security.

Following a four-day trial, a federal jury in Nebraska convicted the former acting director of cybersecurity at the United States Department of Health and Human Services (HHS) for his involvement in a child pornography enterprise, the Department of Justice announced on Tuesday.

Whether you’re a brick and mortar retailer like Target, an e-commerce business like eBay, or independent software vendor like Adobe, nothing can damage a brand quite like a data breach. The fallout can include reputational damage, a decline in sales, diminished company valuation, and executive firings. Now for the good news.

Google has plugged 50 security vulnerabilities in the latest update to the Chrome browser. Among the issues fixed in Chrome 37 are a number of bugs that can be used together to break out of the Chrome sandbox and execute code remotely. That discovery earned the researcher behind it a $30,000 bug bounty. Several other vulnerabilities earned researchers between $500 and $4,000.

What Can we do Once we Identify the Root Cause? We Can Work to Address it. 

After analyzing hundreds of millions of hostnames, researchers have determined that many of them are live only for a 24-hour period, timeframe in which they can be used for malicious activities.

Routers produced by China-based networking solutions provider Netis Systems are plagued by a security hole that can be leveraged by an attacker to gain control of the devices, Trend Micro reported on Monday.Netis Systems is part of the Netcore Group, which is headquartered in Shenzhen. Their products are sold under the Netcore brand name in China and as Netis is other parts of the world. According to the security firm, Netis/Netcore routers are exposed by a backdoor that can be...

Authorities in South Korea have arrested a total of 16 individuals suspected of abusing the personal details of millions of people to earn large amounts of money.

SINGAPORE - Singapore on Tuesday announced new measures to strengthen cyber security to prevent a recurrence of attacks on government websites including those of its president and prime minister.

Security vendors have their eyes set on cloud and virtual environments this week as the VMworld conference in San Francisco gets underway.

Attackers are targeting Russian victims with a ruse designed to get them to install the Kelihos malware, according to security firm BitDefender. 

As organizations worldwide become more and more aware of the risks posed by the lack of protection against cyber threats, information security spending will continue to increase, Gartner forecasts.