SecurityWeek

Researchers at Symantec have identified a group of attackers targeting Russian-speaking individuals since at least January 2012.

Adobe has released an out-of-band update to address a Flash Player vulnerability that has been exploited in the wild in attacks targeting older versions of the application.

A new variant of the CTB-Locker (Critroni) ransomware has been spotted in the wild by researchers at Trend Micro.

Davos, Switzerland - Imagine a world where mosquito-sized robots fly around stealing samples of your DNA. Or where a department store knows from your buying habits that you're pregnant even before your family does.

Australia-based enterprise software provider Atlassian has released updates to address a serious vulnerability affecting several of the company’s solutions.The issue, an Object-Graph Navigation Language (OGNL) double evaluation vulnerability, has been rated as critical, which indicates that it has a CVSS score ranging between 8.0 and 10.

2014 was quite the year. From the string of major data breaches leading to reputational damage, to large-scale cloud hacks creating distrust in cloud-based services, who would’ve predicted the past year would be as eventful as it was, security-wise? Well, as we enter the New Year, it’s time to reflect on these latest occurrences and consider what they may lead to in the year that lies ahead.

China's controversial telecommunications equipment maker Huawei supports the ruling Communist Party and loves the country, its CEO said Thursday, but stressed Beijing has never asked it to spy on the United States or others.

Google announced on Wednesday the release of Chrome 40 for Windows, Mac OS and Linux. The latest update for the popular Web browser (40.0.2214.91) includes a total of 62 security fixes.

While analyzing an instance of the Angler exploit kit, French security researcher Kafeine identified what appears to be an exploit for an Adobe Flash Player zero-day vulnerability.

A few weeks ago, Morgan Stanley fired an employee for accessing client information and publicly posting some of it on the Internet. The incident served as a reminder that sometimes the one who will do you harm doesn't have to break in - he or she is already seated at your table.

Some mobile applications are making real-life games of hide-and-go-seek a whole lot easier, according to research presented recently at the ShmooCon 2015 security conference.

A serious cross-site scripting (XSS) vulnerability plaguing the Google Apps administrator console was patched by the search giant a few months ago.

Israeli police on Wednesday arrested a man suspected of hacking into the computers and stealing the work of international recording artists including Madonna, police said. A law enforcement source told AFP that the investigation was linked to a complaint filed by a local representative of the US star, although no names were mentioned in an official police statement.

For quite a few years, enterprise IT departments have commonly addressed network security by leveraging Intrusion Prevention Systems (IPS). As we continue the discussion from my previous column (about the paradigm shift needed for designing security for the Operational Technology/OT environment vs.

Application networking solutions provider A10 Networks unveiled on Tuesday a new version of the Advanced Core Operating System (ACOS) platform, which powers many of the company’s products.