SecurityWeek

A security researcher at North Carolina University has found that the app verification service used by Google to determine whether a particular Android application is malicious is "fragile and can be easily bypassed."

Facebook users are being targeted by a Christmas-themed scam that hijacks the reputation of well-known companies such as Walmart, Visa and Best Buy.

IBM Report Says Security is a Top Barrier to Adoption in Business Analytics, Mobile, Social Business and CloudAs business demand for mobile, cloud, social business, and business analytics rises, enterprises have to deal with security concerns and severe IT skill shortages, IBM said in its latest Tech Trends Report.

Shortly after a few Pakistani websites were defaced, the Pakistan Cyber Army (PCA) responded with a massive defacement campaign focusing on China, less than 24-hours after taking out 26 Bangladeshi government domains. As is the case with most defacements from the PCA, or similar groups, the motive is mostly entertainment – unless there is a chance for political propagandizing. According to messages left by the PCA, it would see that propaganda was the aim this time around.

In February of 2008, two backup tapes containing data maintained by the U.S. Secret Service were left behind on a DC Metrorail. Now, nearly five years after the fact, the Department of Homeland Security's Office of Inspector General (DHS-OIG) is launching an investigation into the incident.

Researchers from Rapid7 and the Shadowserver Foundation discovered something unique last week. While browsing files on USENET, they discovered a botnet that has thousands of endpoints, and was able to operate without detection for months. To make matters worse, the botmaster took to Reddit earlier this year in order to brag about it.

Even after various compliance requirements and regulations went into effect, the healthcare industry has not had much success in reducing data breaches, according to an analysis of data breaches from 2009 to 2012.

Rapid7 on Friday released Metasploit Pro 4.5, the latest version of its flagship penetration testing and security risk assessment tool. The new release brings capabilities that let organizations simulate social engineering attacks and help understand just how vulnerable they may be to phishing attacks.

Dhahran - Oil giant Saudi Aramco said on Sunday that an August cyber attack on its computer network targeted not just the company but the kingdom's economy as a whole.

When I was a boy growing up in New Jersey, the basement in our older family home would flood several times a year. It was on a concrete slab and usually dried out after a few days, so it was okay. I came home from college one weekend and upon hearing my mom say she was going to carpet the basement, I reminded her of the periodic floods. She looked me in the eye and said, "Dammit Alan, I’m doing...

Even security experts have trouble detecting a potentially dangerous Website on a mobile browser, according to a recent study at Georgia Tech.

In what appears to be another case of the FBI taking credit for cracking a case they created, a former sailor is being charged with attempted espionage, after he allegedly tried to deliver naval secrets to the Russian Federation.

LONDON - A British student was on Thursday convicted for his role in a series of cyber-attacks by the hacking group Anonymous that cost the US online payments giant PayPal millions of dollars. Christopher Weatherhead, 22, was found guilty of participating in attacks by Anonymous on PayPal, MasterCard and other companies that refused to process payments to the whistleblowing website WikiLeaks.

Before arriving at Apple this fall, Kristin Paget used to break things at Microsoft. Now, her job will be to help secure Mac OS X for Apple, as the company that was once blasé about security starts to take things seriously. Paget’s LinkedIn profile lists her as working at Apple since September 2012 as a “Core OS Security Researcher”.

RIM is planning to release BlackBerry 10, the latest edition of its mobile operating system, on Jan. 30, and with that release comes an unmentioned security feature – password blocking. RIM hasn’t officially announced the protection settings, but a BlackBerry site in the U.K. discovered a list of 106 passwords that are forbidden on the new mobile OS.