SecurityWeek

OpenX, the open source ad serving platform, patched two flaws last week, after they were discovered by Geneva, Switzerland’s High-Tech Bridge. The platform has had several issues before, and is a favorite target of criminals operating using malvertising as an attack vector.

Phishing attacks continue to succeed with alarming regularity, and the problem is not just limited to regular employees.

SEOUL - South Korea on Thursday said it would double its cyber-security budget and train 5,000 experts amid growing concern over its vulnerability to attacks it blames on North Korea.

Researchers recently uncovered a serious vulnerability in Android which would allow attackers to modify apps without affecting the cryptographic signature.

Ubisoft, the studio behind some widely popular games such as Assassin’s Creed and the Far Cry series, disclosed that they have suffered another security incident on Tuesday, and are urging users to reset their account passwords.

WASHINGTON - Europeans may express outrage over revelations of US spying but they know perfectly well how the espionage "game" is played -- everybody spies on everybody, former intelligence officials say.

Malicious automatic web application access is one of the most relevant dangers in the current web application’s threatscape. Automated tools can be used for many malicious purposes, such as scraping the web application’s content, spamming, and application-level DoS attacks. More specifically, attackers may use automated tools to post comments in blogs and forums, create fake accounts, retrieve mailing lists, and advertise products.

Joint research by Rapid7 and an independent security researcher has spotlighted vulnerabilities in embedded technology used to remotely manage servers known as baseboard management controllers [BMCs].

Businesses and government agencies are a popular target for attackers looking to steal information and destroy networks, and they are woefully unprepared to deal with the attacks, FortiGuard Labs researchers wrote in a new report analyzing attacks in 2013.

MOSCOW - Several countries rushed to reject asylum requests from fugitive US intelligence leaker Edward Snowden on Tuesday after he sought safe haven in 21 nations in a bid to win protection from American authorities. As Snowden's options appeared to narrow, Washington said it was hopeful that he would return home soon to face trial.

Two different malware families are regularly downloading new variants of each other to re-infect the compromised machines and make cleanup much harder, Microsoft said. 

It took nine years, but a man U.S. authorities finally got their hands on a man they say was a player in the notorious ShadowCrew online fraud forum.

When Making the Case for a Security Budget, Don’t Just Provide Numbers and Statistics...

STOCKHOLM -  Fugitive US intelligence leaker Edward Snowden has sought asylum in 21 countries, WikiLeaks said Tuesday.

Accusing them of being “scumbag business practices”, Anonymous claims to have leaked the customer database of Relead.com, a service that helps websites convert anonymous visitors into actual sales leads by examining their IP information. According to the company, Relead.com can “track exactly who is visiting your website, and how valuable or interested they are in your business.”

Mark Dowd, co-founder of Azimuth Security, disclosed details of vulnerabilities he discovered in the ZRTPCPP library last week, which is a core component for many secure phone applications including Silent Circle, the private communications company co-founded by PGP creator Phil Zimmermann. The ZRTP protocol was originally designed by Zimmermann.

Social Media Accounts are Critical Access Points –  Treat Them as Such. 

WASHINGTON - Fugitive US intelligence analyst Edward Snowden has submitted asylum requests to 19 more nations including Cuba, Venezuela, Brazil, India, China, Russia, Germany and France, Wikileaks said Monday.

Researchers at McAfee recently uncovered a malware campaign that snared victims in both the private and public sector in the United Arab Emirates, Oman and a host of other countries in the Persian Gulf and Caribbean.

A technical advisory from Command Five, an Australian security consultancy, has outlined the recently patched flaws in Atlassian’s Crowd Single Sign-on (SSO) software package. However, despite fixes, the turnkey identity management offering still appears to be vulnerable to a major flaw that allows attackers to take complete control of any Crowd server.