SecurityWeek

A new financial malware designed to target the customers of South Korean banks has been spotted in the wild by researchers at Trend Micro.

CSRF, XSS and SQL injection vulnerabilities found in CA Release AutomationCA Technologies, one of the world's largest independent software corporations, has released a hotfix to address several vulnerabilities affecting the company's CA Release Automation product.

NEW YORK - Microsoft said Monday it had secured broad support from a coalition of influential technology and media firms as it seeks to challenge a US ruling ordering it to hand over emails stored on a server in Ireland.

Current Certification and Accreditation Regimes Have Become a Hindrance to the Rapid Fielding of Effective Software Solutions

Vulnerabilities affecting a popular WordPress plugin are being abused by cybercriminals to hijack websites and redirect their visitors to a page set up to serve malware, researchers at Sucuri reported on Monday.

A recent report from the Ponemon Institute underscores the challenges businesses face when they trying to secure user access to data.

Sony Pictures organized a town hall-style meeting with staff Monday to discuss the massive cyber attack on the Hollywood studio, a day after hackers promised a big "Christmas gift."

The market for stolen identities is thriving. But it's not just individual pieces of information that are selling. According to research from Dell SecureWorks, cybercriminals are also hawking complete kits of information. For example, a scan of a working social security card, name and address can go for $250. Another $100 will get a buyer a utility bill for additional identity verification.

Mark Marmilev, the former chief technology officer of the Costa Rica-based centralized digital currency service Liberty Reserve, has been sentenced to five years in prison and ordered to pay a $250,000 fine, the U.S. Department of Justice reported on Friday.

The developers of Docker last week released new versions of the product to address several security issues, and they shared some information on the steps taken by the company to make the solution more secure.

A researcher has identified a stack buffer overflow vulnerability in Honeywell's OPOS (OLE for Retail Point-of-Sale) Suite, a solution that provides a standard programming interface for the integration of PoS hardware into retail PoS systems based on Microsoft Windows.

Sony Pictures Entertainment pressed media outlets Sunday against using data hackers may have leaked about the studio. In the letter sent to groups including The New York Times and The Hollywood Reporter, lawyer David Boies said the "stolen information" must be destroyed and should not make it to publication.

Researchers have uncovered a worm that's designed to plant backdoors on QNAP network-attached storage (NAS) devices. The malware is distributed through the exploitation of the GNU Bash vulnerability known as ShellShock.

Indian police on Saturday arrested a 24-year-old executive believed to be the handler of an influential Twitter account supporting the Islamic State group, officials said. Mehdi Masroor Biswas, employed with an Indian food conglomerate in the southern city of Bangalore, is alleged to be the handler of the Twitter account @ShamiWitness.