SecurityWeek

Cloud storage provider Dropbox, has taken on outside help in order to investigate a potential breach, which is being blamed as the reason for a sudden spike in spam directed at the service’s users.On Wednesday, users who said that they used unique email addresses when associating with Dropbox were seeing a massive flux in spam.InBoxes targeted by the spammer are seeing advertisements for EU Dice, Euro Gaming Palace, Premier Players Club, Vegas Virtual, SP Casino, and Best2day Support, and this...

ITWallStreet.com, a job board for IT talent looking to work in the financial district, was hacked on Wednesday – leaving some 50,000 users exposed. The attacker, going by Masakaki and claiming roots with TeamGhostShell, said the breach was part of a larger effort that focuses on financial institutions.ITWallStreet.com allows users to “discreetly connect with Wall Street’s IT career community.”

Just days after announcing that Dutch authorities took down two secondary servers used by the Grum botnet, FireEye late Wednesday reported that the entire botnet has been knocked offline, with all known command and control servers left without a heart beat—or at least without connectivity to the Internet.

An Estonian man was sentenced on Wednesday to seven years in prison for taking part in two separate identity theft schemes.

A group of software security experts has issued guidelines designed to reduce the number of exploitable vulnerabilities ending up in production code.

Palo Alto Networks IPO 'Exponentially Oversubscribed' - Revised Price Range Could Value Company At More Than $2.6 Billion on IPO Day

Smart grids were not designed with security in mind, making the entire infrastructure highly vulnerable, McAfee said in a recent report.

The Department of Homeland Security, through its Industrial Control Systems Cyber Emergency Response Team (ICS-CERT), issued a warning last Friday about security vulnerabilities in the Tridium Niagara AX Framework, a popular software platform that integrates various control systems and devices and allows them to be managed over the Internet.The scary part? The security flaws were reported months ago, and permanent a fix has not yet been created.

Cyber-criminals are employing new tactics to circumvent the risk analytics engines used by banks to detect financial fraud, Trusteer researchers found.

Zero-day disclosures, new tools and exploits abound in this year's Black Hat conference in Las Vegas. Next week, the Caesar's Palace hotel in Las Vegas will host the 15th annual gathering of the minds in the world of security known as Black Hat USA.

Armed with an extra $22.4 million in its pocket following a Series C financing round announced just over a week ago, AlienVault, the San Mateo, California-based company behind open source SIEM, OSSIM, and the AlienVault Open Threat Exchange, today announced the latest version of its suite of security management products.

According to Webroot’s Dancho Danchev, a service targeting Russian and Ukrainian users, is offering access to compromised social networking and email accounts.

On Tuesday, Boston-based Rapid7 announced that they have introduced the means to increase vulnerability management efficiency by offering tighter integration between Nexpose and Metasploit.

Ever since the invention of the lock, someone (somewhere) has tried to defeat it, often going to extremely creative lengths to do so. Such is the case of Ray – a security researcher and law enforcement consultant from Germany– who used a 3D printer to generate copies of handcuff keys that are normally restricted to law enforcement; the Bonowi and Chubb.

CipherCloud, a provider of cloud encryption technologies, has launched a cloud encryption gateway for Office 365 that transparently encrypts all email, calendar, and contact data stored in Microsoft's cloud-based Exchange Online and third-party Hosted Exchange services.