SecurityWeek

A researcher known for unlocking Motorola handsets, has leveraged a vulnerability in the TrustZone kernel to bypass the bootloader restrictions on several devices sold by Verizon.

Peiter Zatko, better known to the InfoSec world as "Mudge", earning his reputation as a member of L0pht and the Cult of the Dead Cow, announced last Friday that he is leaving DARPA in order to take a position at Google.

Last week, reports surfaced of brute force attacks targeting a large number of WordPress blogs scattered across the Internet. The attacks are still ongoing, with attackers launching brute force attacks against WordPress administrative logins using the username "admin" and trying combinations of thousands of passwords to gain unauthorized access.

Does security awareness training actually help? When it comes to phishing and spear-phishing attacks, many executives appear to think it does make a difference.

NSA, Military Service Academy Experts Test Advanced Cyber Tactics and Technologies at Cyber Defense Exercise Hosted by Lockheed Martin

Java has been a very hot topic for security managers this year due to a steady stream of 0-day Java vulnerabilities that have been disclosed, with many of them being exploited in the wild. However, the challenges of Java-based threats go deeper than your average 0-day vulnerability, and these challenges will likely affect your approach to controlling them.

eIQnetworks, a provider of security, risk and compliance solutions, has launched a new subscription-based offering designed to help smaller organizations quickly and cost effectively deploy a SIEM and log management solution.

Caracas - The Twitter accounts of Venezuela's acting president Nicolas Maduro and the ruling socialist party were hacked Sunday as the country went to the polls to pick a new president, officials said.

MANILA - Suspected Chinese hackers defaced the website of the Philippines News Agency (PNA) on Sunday, officials said, a possible repeat of cyber attacks last year also blamed on China during a territorial row.

Solera Networks, a provider of security Intelligence and analytics solutions, this week launched a solution designed to help responders understand the impact of security breaches, such as what systems and data were affected, along with what the root cause was and overall impact. More importantly, Solera says, the solution helps security teams determine if the incident is over and won’t happen again.

BEIJING - China and the US, which are embroiled in a bitter dispute over hacking, have agreed to set up a cybersecurity working group, US Secretary of State John Kerry said Saturday.

In this episode of Security Conversations, malware forensics expert Greg Hoglund talks to Ryan Naraine about the inner workings of APT attack campaigns, the legal issues around hacking-back against adversaries and why the industry n

The Guantanamo war crimes tribunals have been delayed once again, after case related files went missing from the defense team’s systems, and hundreds of thousands of documents, including attorney-client communications, were discovered on the systems of prosecutors.

Kaspersky Lab has discovered a link between the Chinese hackers blamed for a series of attacks against gaming companies, and an ongoing watering hole attack on a site dedicated to providing support for Tibetan refugee children.

Vudu, a subscription-based digital entertainment service, says that crooks walked off with a number of items, including hard drives when they broke into their offices last month. The company says the delay in notification was due to a request form law enforcement investigating the break-in.