SecurityWeek

Researchers from MacAfee have uncovered a new variant of Android malware targeting banking customers in Italy and Thailand.

Security Explorations, a start-up from Poland credited with the discovery of several Java flaws, has turned one of their discoveries out to the public for peer review. The problem is the fact that the researchers believe Oracle is wrongly classifying a legit security issue as expected behavior, so they want additional insight.

Chase Bank customers who took to social media on Tuesday to express concern and anger over reports of null accounts and zero balances can rest easy the bank says, because the problem has been resolved.

TAIPEI - Taiwan has set up a unit to create a comprehensive Internet shield against hackers, its intelligence chief said Wednesday, in response to what it claims is a growing cyber threat from China.

A botnet called Chameleon, researchers say, is responsible for stealing $6 million per month from advertisers online, by emulating human traffic. The research and warning comes from Spider.io, who published details on the botnet and a list of some of the largest hosts.

SEOUL - The South Korean military raised its cyber attack warning level Wednesday after computer networks crashed at major TV broadcasters and banks, with initial suspicions focused on North Korea.

WASHINGTON - China is pouring massive amounts of money and resources into cyber attacks aimed at stealing business secrets, security researchers told a congressional panel on Tuesday.

GAO Report: IRS Has Improved Controls but Needs to Resolve WeaknessesThe Internal Revenue Service has addressed some of the security issues in its IT infrastructure, but it still has a long way to go, the Government Accountability Office said in a new report.

A hacker going by the name of Guccifer has released confidential memos to former U.S. Secretary of State Hillary Clinton stolen from the email account of a former White House aide, according to reports.

SAN FRANCISCO - US authorities are investigating whether Microsoft or its partners bribed officials in China, Italy and Romania to get software contracts, The Wall Street Journal reported Tuesday. Microsoft responded to the reports by calling for a full review of the facts.

There may be a recession in Europe, but business is booming for cyber-criminals.

Apple on Tuesday released iOS 6.1.3, the latest software update for iPhone and iPads, which fixes a security flaw that lets anyone with physical access to the device bypass the screen lock feature.

Federal authorities have charged two California men with remotely hacking into the computerized cash registers of various merchants to obtain fraudulent gift cards.

Google on Tuesday announced that it now fully supports DNSSEC (Domain Name System Security Extensions) validation on its Google Public DNS resolvers. Previously, the search giant accepted and forwarded DNSSEC-formatted messages but didn’t actually perform validation.

GFI Software, maker of the VIPRE antivirus product line and other security tools and services, on Monday said that it would spin off its security business unit.

Predictive Security Intelligence Isn't Just looking ahead, It's Looking at Everything We Already Have to Effectively Identify Trends and Thwart Attacks Before They Occur...

A vulnerability discovered by researchers at UC Berkeley enabled attackers to eavesdrop on and modify calls and text messages sent using T-Mobile's "Wi-Fi Calling" feature, the researchers told SecurityWeek Tuesday.

Security isn’t sexy. In fact, many people think it’s boring. When it comes to selling security, whether as a concept or in a true “sales” context, the lack of interest in security is compounded by the fact that it’s not urgent (or it doesn’t seem urgent) — until it is.

A federal judge brought the hammer down on a man convicted of hacking the AT&T Website and accessing email addresses belonging to 120,000 Apple iPad owners. The judge sentenced Andrew Auernheimer today to 41 months in prison, ignoring a request for probation that he made last week in a pre-sentencing memo that argued his actions were not driven by any intent to defraud or do damage to AT&T.

Protecting critical infrastructure companies means securing the SCADA (supervisory control and data acquisition) systems that monitor and manage their activities. Unfortunately however, security in the world of SCADA networks is often bolted-on, leaving enterprises with security holes for hackers to walk through.