SecurityWeek

In some ways, an attack against an organization is similar to a house made of cards; removing one card can cause the whole thing to collapse.

LOS ANGELES - Those behind the massive leak of naked celebrity photos that shocked the show business world could and should be prosecuted, including for child sex crimes, experts said Wednesday.

The first European edition of Suits and Spooks, the cyber security conference that brings together decision makers and influential thought leaders in the industry, will be held in London on September 12.

In recent attacks involving the Angler exploit kit, malicious code was injected directly into running processes instead of being written to the disk, a researcher reported on Sunday.

Corporate-owned device fleets have been the norm since mobile was introduced into the enterprise. Today, a number of organizations continue this tradition, only now it has morphed into COPE. Corporate-Owned, Personally Enabled policies promise the same user experience, privacy and autonomy of a personal device on a corporate-owned device.

Goodwill Industries International revealed on Tuesday that some of its customers' payment cards were compromised after the systems of a third-party vendor became infected with malware.

AVG Technologies announced its plan today to acquire Location Labs, a privately-held company focused on securing mobile devices.

Akamai Technologies has published a threat advisory to warn organizations of attacks where cybercriminals are infecting Linux servers with malware capable of launching powerful distributed denial-of-service (DDoS) attacks.

Mozilla has released Firefox 32 for Windows, Linux, Mac and Android. In addition to some new features, the latest version of the Web browser also includes fixes for several security vulnerabilities and support for public key pinning.

BeyondTrust, a provider of Privileged Account Management and Vulnerability Management solutions, has agreed to be acquired by private equity firm, Veritas Capital.

Home Depot may have become yet another major retailer to have been hit in a data breach.

Apple said on Tuesday that user accounts belonging to some celebrities were compromised in a targeted attack, but said there were no signs of a wider breach of its iCloud service.

Blanket approaches to cyber security don’t work. So many vendors rely on throwing generic signature after signature, and alert after alert without any action. These legacy solutions are stuck in the assumption that all threats are the same and easily stopped – but we know this isn’t the case.

Cybercriminals have compromised the website of an industrial company to conduct a watering hole attack with the goal to collect information on the site's visitors, according to a report.

Domain registrar and Web hosting company Namecheap is warning customers that cybercriminals have been trying to access their accounts by using credentials obtained from third party websites.