SecurityWeek

Oracle on Tuesday released its quarterly Critical Patch Update (CPU) for April, which addressed a whopping 128 security issues across multiple product families. 

AlienVault, the company behind open source SIEM, OSSIM, today announced that its Unified Security Management (USM) suite is now available as a virtual appliance.

According to a new report released this week by mobile security firm NQ Mobile, nearly 95 percent of all mobile malware discovered throughout 2012 targeted the Google’s Android operating system.Overall, NQ Mobile said that it also saw number of mobile malware threats jump 163% to more than 65,000 in 2012.

A C-level executive might seem like the perfect target for an attacker; after all, there is an old adage that goes, kill the head and the body will die. In the cat and mouse game of cybersecurity however, that axiom may not apply as much as some would think.

Advanced Threat Protection & Visibility Series – Part 3: Hacktivists

Schnucks Markets, a 100-store grocery chain across the Midwest, said on Monday that roughly 2.4 million payment cards used at 79 of its 100 stores may have been compromised as a result of a previously disclosed cyber attack.

The Federal Aviation Administration has said that a researcher’s claims that he could hack an aircraft in-flight using only an Android application and a desktop computer are not possible. The FAA’s dismissal comes after Hugo Teso, a German information technology consultant, presented his findings during the Hack in the Box conference earlier this month.

A researcher known for unlocking Motorola handsets, has leveraged a vulnerability in the TrustZone kernel to bypass the bootloader restrictions on several devices sold by Verizon.

Peiter Zatko, better known to the InfoSec world as "Mudge", earning his reputation as a member of L0pht and the Cult of the Dead Cow, announced last Friday that he is leaving DARPA in order to take a position at Google.

Last week, reports surfaced of brute force attacks targeting a large number of WordPress blogs scattered across the Internet. The attacks are still ongoing, with attackers launching brute force attacks against WordPress administrative logins using the username "admin" and trying combinations of thousands of passwords to gain unauthorized access.

Does security awareness training actually help? When it comes to phishing and spear-phishing attacks, many executives appear to think it does make a difference.

NSA, Military Service Academy Experts Test Advanced Cyber Tactics and Technologies at Cyber Defense Exercise Hosted by Lockheed Martin

Java has been a very hot topic for security managers this year due to a steady stream of 0-day Java vulnerabilities that have been disclosed, with many of them being exploited in the wild. However, the challenges of Java-based threats go deeper than your average 0-day vulnerability, and these challenges will likely affect your approach to controlling them.

eIQnetworks, a provider of security, risk and compliance solutions, has launched a new subscription-based offering designed to help smaller organizations quickly and cost effectively deploy a SIEM and log management solution.

Caracas - The Twitter accounts of Venezuela's acting president Nicolas Maduro and the ruling socialist party were hacked Sunday as the country went to the polls to pick a new president, officials said.

MANILA - Suspected Chinese hackers defaced the website of the Philippines News Agency (PNA) on Sunday, officials said, a possible repeat of cyber attacks last year also blamed on China during a territorial row.

Solera Networks, a provider of security Intelligence and analytics solutions, this week launched a solution designed to help responders understand the impact of security breaches, such as what systems and data were affected, along with what the root cause was and overall impact. More importantly, Solera says, the solution helps security teams determine if the incident is over and won’t happen again.

BEIJING - China and the US, which are embroiled in a bitter dispute over hacking, have agreed to set up a cybersecurity working group, US Secretary of State John Kerry said Saturday.

In this episode of Security Conversations, malware forensics expert Greg Hoglund talks to Ryan Naraine about the inner workings of APT attack campaigns, the legal issues around hacking-back against adversaries and why the industry n

The Guantanamo war crimes tribunals have been delayed once again, after case related files went missing from the defense team’s systems, and hundreds of thousands of documents, including attorney-client communications, were discovered on the systems of prosecutors.