Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

WASHINGTON - China and the United States traded hacking charges on Sunday as Washington accused Beijing of stealing US intellectual property and the Chinese authorities expressed concern over US cyberattacks.

Snowden Airs New China Claims as US Seeks ExtraditionHONG KONG - The United States pressed for Edward Snowden's formal extradition from Hong Kong as the former spy fought back with new allegations aired Sunday about the far-reaching extent of US cyber-espionage in China.

It was only a matter of time. When it comes to hit and quit scams, Rogue AV applications and Ransomware are rather cheap and easy to produce, and offer criminals a rather profitable mode of attack. Pay the fee, or lose access to your data.

Adobe's new Chief Security Officer Brad Arkin joins Ryan Naraine to discuss the task of securing the company's assets, the importance of putting roadblocks in front of attackers, the issue of "hacking back" and active defense and his own thinking around vendor bug bounty programs.

Researchers at FireEye have spotted a malware campaign using Google Docs to redirect victims and evade callback detection mechanisms. Connecting the malicious server via Google Docs, offers the malicious communication the protection provided by the legitimate SSL offered by Google, explained FireEye researcher Chong Rong Hwa.

Yahoo is taking action to clean up inactive accounts, but some fear they may be opening up a new door to clever attackers. On July 15, any Yahoo email account or Yahoo ID that has not been logged into for more than a year will be freed up  to be acquired by another user. The idea is to give Yahoo's "loyal users and new folks" the chance to sign up for the Yahoo ID they want.

In my previous SecurityWeek column, I wrote about Managing Security with the Business in Mind and discussed briefly the importance of taking an application-centric approach to security policy management.

STOCKHOLM - A Swedish court Thursday sentenced the co-founder of file-sharing site The Pirate Pay to two years in prison for hacking into the servers of a company managing data for Swedish authorities and banks.

Trustwave this week unveiled new security information and event management (SIEM) software designed to help businesses better defend against security threats that put sensitive data and operations at risk.

The NSA is tapping into our digital lives, monitoring voice calls, emails, social media, and who-knows-what-else. It’s for national security, say those on the side of the NSA; it has stopped terrorist plots already and will stop more.

During his talk earlier this month at RSA Conference Asia Pacific 2013, Alexander Polyakov, CTO of ERPScan, disclosed that there are thousands of unpatched and thus insecure SAP deployments online today, all over the world.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.

Cloud Security

Artificial Intelligence

Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.