SecurityWeek

A Boston-based merchant warned customers this week that a “sophisticated malware attack” had compromised some customers' credit and debit card information. An investigation was underway and more details are expected later this week.

On Tuesday, President Obama signed the continuing resolution that will keep the government running though the end of the fiscal year – avoiding a shutdown. However, within the resolution itself, section 516 to be exact, there is a provision to block IT purchases from China.

According to a recent publication from a team of international law practitioners and scholars, who were invited by NATO to create a manual on the law governing cyber warfare, Stuxnet was an act of force; and the use of such force against Iran is likely illegal, as the U.S. was not acting in self-defense at the time the malware was deployed.

I recently got off the road from two weeks of travel. The first week I was in sunny San Francisco for the annual RSA Security conference, a massive gathering of security wonks and sales people in a maelstrom of light and sound. The second week I was in rainy Washington DC for the far more manageable summit of the International Association of Privacy Professionals (IAPP). The scale of these two conferences is vastly different, but the content is edging closer...

Attackers Exploited Vulnerabilities in ATM Networks Connecting to Bank VPNs and GSM/GPRS Networks, Malware Infected ATMs and POS Systems to Steal Card Data.

Data security company Imation has expanded its IronKey secure USB product line with new hardware encrypted flash and external hard disk drives.

Wells Fargo on Tuesday afternoon said its online banking service was experiencing an “unusually high volume” of traffic that it believes is a result of a denial of service (DoS) attack against the bank. “Today we’ve seen an unusually high volume of website traffic which we believe is a denial of service attack,” a Wells Fargo spokesperson told SecurityWeek.

The road towards effective security begins with pretty logical question. What do we have that hackers are likely to try and steal, take over or manipulate? By understanding the primary motivation of your adversary, you are better prepared to defend against an attack.

Global Survey Shows IT and Security Pros are Less Confident About Stopping ThreatsA new study published by Bit9 shows that in 2012, targeted malware was at the top of the list when it comes to server management concerns in IT. Yet, server management itself is also seen as a problem.

Web application attacks are posing a significant threat to both service provider and on-premise environments, according to a new report on cloud security by Alert Logic.

Security isn’t Binary. The Trick is to Find the Breakeven Between Expenditure of Resources and the Point of Diminishing Returns...

New Attacks Targeting Tibetan and Uyghur Activists Found Using Android Trojan Targeted attacks against Tibetan and Uyghur activists are nothing new, but attackers appear to be expanding their arsenal of attack tools to the Android platform.

SEOUL - Specialist anti-North Korean websites and organisations run by defectors in South Korea said they were the victims of a coordinated cyber attack Tuesday. Free North Korea Radio, Daily NK and North Korea Intellectuals Solidarity, all operated by defectors from North Korea, said their servers crashed simultaneously on Tuesday afternoon, paralyzing their websites.

Java exploits have become popular additions to many crimeware kits for good reason. According to Websense, close to 94 percent of endpoints running Oracle Java are vulnerable to at least one Java exploit.

McAfee has shared details of a new botnet circulating on criminal forums, mostly out of Russia, which targets payment card terminals connected to Windows systems. The botnet, named vSkimmer, has been around since February and appears to be an ongoing project for the person selling it.