SecurityWeek

Researchers at PhishLabs have uncovered a spate of vishing attacks (Voice over IP phishing) have been stealing payment card data from customers of U.S. banks. According to the firm, an attack last week was detected targeting customers of a midsized bank. In the attack, customers received SMS text messages claiming their debit card was deactivated and requesting the customers provide the card and PIN numbers to reactivate it.

Keeping with the definition that a metric is used to tell a story, let's look at an influential metric and how it was established, as well as a few things about how it has been historically presented. I'm going to use the metric as a way of red-flagging a few “don’ts” in presenting metrics, as well: if a metric tells a story, the story may also be exaggerated deliberately or by accident.

FireEye, a provider of threat protection solutions, announced this week that it has added a new Android protection component to its Mobile Threat Prevention (MTP) platform.

Researchers at Arbor Networks are reporting a significant spike in volumetric attacks driven by the growth of Network Time Protocol [NTP] reflection/amplification attacks. In Arbor Networks' ATLAS Q1 2014 Update, the firm noted that the average NTP traffic globally in November 2013 was 1.29 GB/sec. By February 2013, it was 351.64 GB/sec.

WASHINGTON - The Supreme Court heard arguments Tuesday in two cases testing the police's authority to search detainees' mobile phones without warrants, in what could have a major impact on US law enforcement.

Target Corp.

BERLIN - German Chancellor Angela Merkel meets US President Barack Obama this week with shared fears over the mounting Ukraine crisis helping to mend ties ruptured by the NSA eavesdropping scandal.

Nearly All New Mobile Threats in Q1 2014 Targeted Android Users; Cybercriminals Continue to Innovate With Mobile Threats

A survey of nearly 5,000 IT security professionals globally suggests that many corporate leaders may be underestimating the impact data loss could have on their bottomline.

TeleSign, a provider of phone-based authentication and fraud detection solutions, today announced that it has closed a $40 million Series B round of funding. According to the company, the funding will be invested into its global growth strategy, as well as financing an aggressive hiring strategy for the company’s product development and engineering teams.

Information security is a big topic with a lot of disciplines, and hardly anyone is an expert in all of them. The good news is that there are some truly remarkable free tools out there that not only can help you and your team get things done, but also provide a great way to learn new security skills quickly. The list below provides an introduction to what I consider to be some of the most essential tools in particular areas...

Siemens has updates available for two of its products affected by the Heartbleed vulnerability.

Cybercriminals are increasingly looking to online casinos to launder money, according to a new report from McAfee.

The recently-disclosed Heartbleed vulnerability has forced many system administrators to promptly patch affected servers. That was just the easy part. The hard work lies ahead.

Adobe has released security updates for its Adobe Flash Player to address vulnerabilities that are being exploited in the wild.

WASHINGTON - AOL said Monday it had launched an investigation with federal authorities into a security breach that allowed hackers to gain access to around two percent of its email accounts. The probe began "following a significant increase in the amount of spam appearing as 'spoofed emails' from AOL Mail addresses," the Internet company said in a statement.

HP Introduces New Information-Security Service to Help Businesses Reduce Risk HP has announced new consulting services to help clients make rapid, data-driven decisions about the management information-security risk across their organizations.

Synack, a startup that has built a platform for crowdsourced security testing, announced on Thursday that it has received $7.5 million in a Series A funding round led by Kleiner Perkins Caufield & Byers (KPCB). 

Researchers from FireEye have discovered a nasty zero-day exploit that bypasses the ASLR and DEP protections in Microsoft Windows and is being used in targeted attacks.

SAO PAULO - The Google executive considered to be one of the fathers of the Internet on Thursday debunked what he called the "myth" that it is controlled by the United States.