SecurityWeek

Several undocumented forensic services running on all iOS devices can be leveraged as attack points and surveillance mechanisms, a security researcher revealed at the Hope X conference last week.

IBM is advising the owners of certain KVM switches to update the firmware on their devices to address a total of three security holes that can be exploited remotely.

2FA Systems Used by Banks Bypassed with Malware, Rogue Mobile AppsSMS-based two-factor authentication (2FA) mechanisms used by banks to secure their customers' accounts have been bypassed by cybercriminals using a combination of malware, mobile apps, rogue DNS servers, and phishing sites, according to a report published by Trend Micro on Tuesday.

Splunk, a provider of software that helps organizations gather and make use of machine data from a diverse set of sources, has released the latest version of the Splunk App for Enterprise Security. Now in Version 3.1, the company has introduced a new risk scoring framework to enable easier, faster threat detection and containment by empowering users to assign risk scores to any data.

A new survey by the Ponemon Institute suggests that the walls between IT and the business side of the house have not fully come down. According to a survey of nearly 5,000 IT security professionals around the globe, 31 percent of cyber-security teams never speak with their executive team about cyber-security. Of those that did, 23 percent did so annually. Only one percent spoke to executives weekly, while 11 percent did so quarterly.

A new file-encrypting piece of ransomware advertised on underground forums since mid-June is being increasingly used by cybercriminals, a security expert reported last week.

The beginning of July always marks a turning point. Summer finally feels like it’s in full swing, vacations, BBQs, and summer camps are ramping up, and it provides the perfect time to reflect back on the first half of the year and see how we did and what we should change. Looking back on 2014, I think it’s clear that we can be doing better. And that we need to do better.

Four recently-patched OpenSSL vulnerabilities have been found to affect several industrial products from Siemens.

Unknown hackers hijacked the official Facebook page of the Wall Street Journal on Sunday and posted bogus headlines.

It seems to be in the news more and more: hackers penetrating point-of-sale (PoS) terminals at major retailers and making off with credit and debit card information.

Ever since its existence came to light in November 2013, the Neverquest banking Trojan has been enhanced with new features that make it an efficient tool for cybercriminals that are after sensitive information.

Nearly half of the IT professionals surveyed recently by Waratek, a company focused on security and management of Java enterprise applications, believe that the Java applications used by their organizations are vulnerable.

An in-depth analysis of a recently discovered piece of malware that's designed to target Linux and Unix Web servers has been published on Thursday by Virus Bulletin.

Software developer vBulletin announced on Wednesday that it had released a patch to address a serious SQL injection vulnerability affecting the its forum software.

Security researchers believe cybercriminals may be taking a page from government agencies when it comes to malware. According to Sentinel Labs, that metaphorical page has the name of a piece of malware known as 'Gyges' scribbled on it, as well as a list of capabilities normally associated with malware linked to cyber-espionage. The malware appears to originate from Russia, and is believed to have been designed to target government organizations.