SecurityWeek

Researchers representing security companies that are part of the Cyber Threat Alliance have conducted an in-depth investigation into the cybercriminal operations leveraging CryptoWall 3.0 ransomware.

The United States Senate this week passed a controversial cybersecurity bill designed to facilitate sharing of threat data between private companies and the government in an effort to prevent data breaches.

Police in the United Kingdom have arrested a second individual as part of the investigation into the recent data breach suffered by telecoms company TalkTalk.

Google has paid out a $3,133.7 bounty to a researcher who identified a cross-site scripting (XSS) vulnerability on the recently launched YouTube Gaming website.YouTube Gaming, quietly launched by YouTube in late August, provides both live-streamed and on-demand gaming videos. The new service competes with Amazon-owned video game streaming website Twitch.

Authorities in five European countries said Thursday they had staged a coordinated swoop on suspected users of spy malware that gives remote access to other people's smartphones.

A new threat advisory published this week by Akamai’s Security Intelligence Response Team warns organizations about three new types of reflection distributed denial-of-service (DDoS) attacks observed in recent months.

The Xen Project released on Thursday a total of nine advisories describing recently patched Xen hypervisor vulnerabilities.

Google is displeased with Symantec’s digital certificate issuance practices and has asked the security firm to step up its game in order to avoid problems when its certificates are used in the Internet giant’s products.

If you want to tell someone to be more realistic you might say: “Get your head out of the clouds.” But in fact, you have to do the exact opposite if you’re an IT security professional charged with managing security in today’s increasingly cloud-based world.

Hackers have stolen more than 13 million user records from the systems of free web hosting service 000webhost, a security expert reported on Wednesday.

Infinite Automation Systems has released a new version of its Mango Automation product to address a series of vulnerabilities that can be leveraged for various types of malicious attacks.

Malicious actors have been using a Trojan dubbed “Chikdos” to infect MySQL servers and abuse them to conduct distributed denial-of-service (DDoS) attacks.

New "FrostyURL" Zero-Day in Rockwell Automation PLC Can Shut Down Operational Networks.

Even the average Joe is starting to understand that encryption is important. If Joe doesn’t use HTTPS, an attacker can see or hijack his browser session. Session hijacking isn’t a theoretical threat: Over 5 years ago (an eternity in the #infosec world), Eric Butler released the Firesheep session hijacking tool and used Facebook as a target example.

Adobe updated Shockwave Player on Tuesday to address a critical vulnerability that can be exploited for arbitrary code execution.