SecurityWeek

The source code for version 2.0 of the information-stealing Trojan called Pony Loader, also known as Fareit, has been put up for sale by malware authors, Damballa announced on Tuesday.

Mobile data security startup Bluebox Security unveiled the latest release of its flagship security platform this week, which now gives customers the ability to fortify mobile applications with self-defense capabilities, along with other new security features.

Internet fraud detection firm White Ops announced this week that it it has secured $7 million in funding from

A new study estimates that 14 percent of all debit cards in the U.S. were exposed in data breaches in 2013, up from only five percent in 2012.

IBM researchers uncovered a critical vulnerability affecting everyone not running the most up-to-date version of Google Android.

Media reports affirm that malicious insiders are real. But unintentional or negligent actions can introduce significant risks to sensitive information too. Some employees simply forget security best practices or shortcut them for convenience reasons, while others just make mistakes.

ATM maker Diebold announced on Wednesday that it has entered into an agreement to acquire Cryptera, a secure payment solutions provider based in Copenhagen, Denmark.

Officials in Montana are notifying 1.3 million people impacted by a data breach affecting the state's Department of Public Health and Human Services (DPHHS). The state is notifying individuals affected by the breach, which occurred when hackers compromised a DPHHS server. So far, the state said it has not turned up evidence that any information was accessed or used inappropriately.

Security researchers have found a way to bypass the two-factor authentication (2FA) mechanism used by PayPal to enhance the security of customers' accounts.

Security researchers have uncovered a total of 22 vulnerabilities affecting the custom Java Virtual Machine (JVM) implementation used in Oracle Database.

A gang of cybercriminals pulled off a 500,000 euro bank heist over the course of a week, according to researchers at Kaspersky Lab.

Crowdsourced security testing company Bugcrowd launched a new program on Wednesday designed for organizations looking to run customized bug bounties.

Researchers at NSFOCUS say they observed a significant decrease in May of Network Time Protocol (NTP) servers susceptible to being used in distributed denial-of-service (DDoS) attacks. 

Morgan Marquis-Boire and Sergey Golovanov Present Research on HackingTeam’s Remote Control System “Galileo” in London on June 24

Cybercriminals are increasingly abusing flaws in trusted mobile apps and services in an effort to distribute malware, McAfee Labs revealed in a threat report published on Tuesday.

Google is developing its own version of OpenSSL, tentatively dubbed BoringSSL.

The popular online magazine AskMen has been compromised and abused to distribute a piece of malware, Websense reported on Monday.

The Havex remote access Trojan (RAT) is being used in cyber espionage operations aimed at industrial control systems, according to recent reports.

OTTAWA - Lawyers at Canada's justice department were fooled into providing confidential information by responding to phishing emails far more than average Internet users, according to security test results released Monday. According to Canadian government figures, 156 million phishing emails are sent worldwide on a daily basis.

BAGHDAD - A powerful jihadist group pushing toward Baghdad is waging a parallel war online, flooding social media with updates and riding the football World Cup frenzy to spread its message with corporate-like sophistication.