SecurityWeek

The crash of the Malaysia Airlines flight MH17 in eastern Ukraine on June 17 continues to make headlines, making it a perfect event for cybercriminals to leverage in their malicious campaigns.

Siemens has released version 7.3 of the SIMATIC WinCC supervisory control and data acquisition (SCADA) system to address several vulnerabilities, most of which can be exploited remotely.

We read about hacks and vulnerabilities all of the time. A retailer is successfully attacked via malware and credit cards are stolen. A credit card processing company is hacked via cross site scripting and credit cards are stolen. An online social media company is attacked through an SQL injection attack and usernames and passwords are stolen.

After analyzing a recently discovered piece of ransomware called CTB-Locker (Critroni), security researchers from Kaspersky Lab have determined that the threat has a number of features that separate it from many other forms of malware.

Starting with Firefox 31, the malware detection mechanism integrated into the Web browser has been expanded to include downloaded files, Mozilla announced on Wednesday.

The European Court of Human Rights (ECHR) ruled on Thursday that a Latvian man suspected of being involved in the creation of the Gozi banking Trojan would not be exposed to a real risk of ill-treatment if he were to be extradited to the United States.

UK Travel Company Fined After Hackers Stole Details of 1.1 Million Payment CardsThe United Kingdom's Information Commissioner's Office (ICO) announced on Thursday that a UK-based online travel services firm has been fined for failing to protect customers' personal information as required under the Data Proection Act.

Hugh Njemanze, Founder and CTO of ArcSight Joins ThreatStream as CEO

Real Googlebots help Google discover new and updated webpages so they can be added to the search engine's index; fake Googlebots have no such good intentions.

BERLIN - The White House chief of staff and his German counterpart met Tuesday amid a serious rift over allegations of US spying.

The need for extreme network protection may be the driving force behind your decision to invest in a next-generation firewall (NGFW), but your enterprise also has other factors to consider. You want a NGFW that ensures business resiliency, a reasonable total cost of ownership (TCO), continuous uptime, scalability and flexibility to handle change. It must fit your budget and your network's specific needs.

A large number of websites have been compromised over the past days by cybercriminals who are exploiting a recently patched security hole in a popular newsletter plugin for WordPress.

Law enforcement authorities announced the indictment of six people in connection with a cybercrime operation that defrauded users of the StubHub ticketing service.

Bugcrowd, the crowdsourced security company that specializes in bug bounty programs, has released a guide to help organizations in setting up responsible disclosure programs.

The European Central Bank (ECB), the organization that administers the monetary policy of the Eurozone, announced on Thursday that it had suffered a data breach in which some contact information was stolen.

Facebook has removed a scam that was redirecting users to the Nuclear exploit kit, according to researchers with Symantec. The scam relied on users getting drawn into clicking on a link promoting a work-from-home opportunity with the headline: 'EXPOSED: Mom Makes $8,000/Month and You Won't Believe How She Does It!'

GTRI Cyber-security specialists Ryan Spanier, Christopher Smoak, and Bryan Massey (l-r) pose in facilities used to gather information on the activities of hackers and pending cyber attacks. [Georgia Tech Photo: Gary Meek]

WASHINGTON - The United States has failed to sufficiently adapt to new cyber-security threats, exposing itself to potential terror strikes as devastating as September 11, authors of the report on the 2001 attacks warned Wednesday.

Security services provider and certificate authority Comodo announced on Wednesday the launch of Comodo SecureBox, a solution designed to help organizations protect the important applications running on their endpoints.