SecurityWeek

Ruby on Rails maintainers have released another critical update to the popular Web application framework to address some serious issues.

According to a report from the New York Times, Iran is to blame for a wave of DDoS attacks against several U.S. banks this summer. This nation-state attack was previously thought to be the work of a small band of hackers, but government officials and security researchers are now voicing their doubts.

After pleading guilty last September, the US Department of Justice said on Tuesday that Cezar Butu, of Ploiesti, Romania, has been sentenced to 21-months in prison for his admitted role in a Web-based scam targeting payment card data.

As a privacy attorney and General Counsel of security companies, I have had the privilege of listening to the humorous ways in which colleagues convince themselves they have more privacy in the workplace than they actually do.

BRUSSELS - In a bid to seize the initiative from increasingly sophisticated online criminals, the European Union unveiled a new cybercrime center Wednesday. Criminal gangs are using new technology to steal identities, empty bank accounts or profit from child sex abuse, and only a centralised system can combat them, EU Home Affairs Commissioner Cecilia Malmstroem said.

Mobile security and device management provider AirWatch has launched a standalone platform to handle mobile devices and apps in bring-your-own-device (BYOD) environments.

LONDON - The British military's dependence on information technology means it could be "fatally compromised" by a cyber-attack but the government seems unprepared for such an event, lawmakers warned Wednesday.

SEOUL - What is one of the world's most prominent advocates of Internet freedom doing in a country where unregulated access to information is generally either impossible or criminal?

Cloud-based web security and infrastructure provider Incapsula says they identified a botnet that they believe was used distributed denial of service (DDoS) attacks against US-financial institutions last year.

WASHINGTON - A Chinese man pleaded guilty in a US federal court to pirating software that investigators said was worth more than $100 million, the US said Tuesday.

A security researcher has uncovered two zero-day vulnerabilities in Symantec's desktop encryption product. One of the security issues could potentially be used to trigger the other flaw, he claims.

Yahoo said it has closed a cross-site scripting vulnerability a researcher said left Yahoo Mail users susceptible to having their accounts hijacked – though a security firm is disputing that claim.

Microsoft released seven security bulletins today in its first Patch Tuesday update of the year. Two of the seven bulletins are rated 'critical', the highest security rating for Microsoft, while others are classified as 'Important'.  Of the critical bulletins, the first addresses a vulnerability that exists in the way Microsoft Windows Print Spooler handles specially-crafted print jobs. If exploited, an attacker could corrupt memory in such a way that an attacker could execute arbitrary code.

The European Network and Information Security Agency (ENISA), Europe’s cyber security agency, on Tuesday released a threat landscape report that provides an overview of current threats, threat agents and threat trends.

Latest Version of Peakflow SP Boosts Mitigation Capacity and Offers CDN-Aware Mitigation

TOKYO - A computer hacker who taunted Japanese police for months with a string of vexing cyber riddles launched the campaign as part of a grudge against authorities, media reports said Tuesday.

Specifics are Critical to Understanding the Threat, Responding to It, and Assessing The Impact...

BANGKOK - An Algerian computer hacker wanted by the FBI for allegedly stealing millions of dollars from American banks to fund a lavish lifestyle has been arrested in Bangkok, Thai police said Monday. Hamza Bendelladj, 24, appeared unruffled by his looming extradition to the United States as he was paraded before the media in handcuffs with a beaming smile.

Symantec has identified new malware targeting Google Android devices that collects personal data. The malware, detected as Android.Exprespam, is spread through the spamming of links to fake Google Play pages. These pages are hosted on a server located in Washington.

PHNOM PENH - About 80 Taiwanese and Chinese nationals have been arrested in Cambodia for allegedly extorting money from victims overseas over the telephone, police said on Monday. The suspects, mostly Taiwanese nationals who were arrested on Saturday, will be deported to their home countries to face justice, interior ministry spokesman Khieu Sopheak told AFP.