SecurityWeek

Facebook Patched Flaw That Could Be Exploited for DDoS AttacksFacebook has fixed a vulnerability that could have been leveraged to amplify distributed denial-of-service (DDoS) attacks by using the company's own datacenters.

It was 2010 when the Stuxnet malware first appeared in the public consciousness.Though the years have passed however, there is no shortage of machines still vulnerable to attacks on one of the vulnerabilities the malware exploited as it trotted across the globe.

Roman Valerevich Seleznev, a Russian national accused by United States authorities of operating several carding forums and hacking into point of sale (PoS) systems in an effort to steal payment card information, has been denied bail, the Department of Justice announced on Friday.

New research from Kaspersky Lab shows that cyber-attack activity involving Syria is stepping up in terms of both sophistication and organization.

Chinese Group Believed Responsible for Community Health Systems Attack That Exposed Personal Information of 4.5 Million PatientsCommunity Health Systems, Inc., one of the largest hospital operators in the United States, has suffered a data breach that affects millions of individuals, the organization revealed on Monday.

Israeli cybersecurity startup GuardiCore, announced on Monday that it has closed an $11 million round of funding led by Battery Ventures.

It’s no surprise to anyone reading this that advanced malware is destructive, deceitful and resource-draining. But, what was a surprise to me was that the average cost of an attack for U.S. businesses in 2013 was a mind-boggling $11.6 million. Equally disturbing was the fact that 67 percent of security professionals in the U.S. do not have technology to fight advanced malware.

Pretty Good Privacy (PGP), the popular email privacy and authentication software is fundamentally broken and it's time for it to "die," says Matthew Green, a respected cryptographer and research professor at Johns Hopkins University.

A recent security bulletin released by Microsoft as part of the August 2014 Patch Tuesday can lead to a crash on some systems, the company said in a knowledge base article.

The average peak size of distributed denial-of-service (DDoS) attacks in the second quarter of 2014 increased by 216% compared to the first quarter, according to the latest trends report from VeriSign.

A piece of mobile malware has been discovered that is said to have infected tens of thousands of iPhones and iPads in an effort to help its masters make a profit.

In an attacker's ideal world, he or she would infect a desktop, steal the user's RDP password and move smoothly across the network to the RDP server and immediately gain access. In real life however, things can get a little more complicated. 

Our team is busy putting together the best ICS Cyber Security Conference to date.

The report of the largest known harvest of Internet credentials, an estimated 1.2 billion passwords, names and personal information from 420,000 web sites by a group of Russian hackers, is but the latest incident in a surging tide of global cybercrime.

WASHINGTON - The National Security Agency is developing a tool that can detect cyberattacks from an adversary by analyzing Internet traffic and respond automatically, a leaked document showed. Wired magazine revealed the existence of the program called MonsterMind in an article following a series of interviews with former NSA contractor Edward Snowden.

Researchers have uncovered a new variant of the Bugat banking Trojan which uses HTML injection techniques that are very similar to the ones used by Gameover Zeus.

Hackers Breach Payment Card Processing Systems of Supermarket Chains Supervalu and Albertson’s 

Google is bolstering its Safe Browsing service with a new alert for potentially unwanted programs.

WARSAW - Ukrainian hackers hostile to the government claimed Thursday to have launched a cyber attack against the websites of Poland's presidency and the Warsaw Stock Exchange. The hacker group Cyber Berkut said it blocked the sites, both down on Thursday afternoon, in response to what it said were Poland's actions as "sponsors of fascism in Ukraine".

Lockheed Martin Says Attackers Went Quiet After Mandiant's APT1 Report Called Out Chinese Cyber Spies