SecurityWeek

WASHINGTON - Authoritarian regimes around the world are using technology from a Silicon Valley firm for Internet surveillance, filtering and censorship, according to a report by Canadian researchers.

On the Internet, nobody knows you're a dog -- but it is getting increasingly easy for someone to figure it out.

On the day that the company started a PR push for the Zscaler Application Profiler (ZAP), using a Cross-Site Scripting (XSS) flaw discovered in ESPN’s ScoreCenter mobile application as a case study, an email started circulating detailing a XSS flaw on Zscaler’s very own website.

A report from Telework Exchange, sponsored by EMC, VMware, Cisco, and Carahsoft, shows that Federal employees are taking advantage of the BYOD bandwagon, but at the cost of higher risk to their respective agencies.

A recently disclosed vulnerability in the Foxit PDF viewer has been patched in the latest software release. The issue, first discovered by Italian security researcher Andrea Micalizzi, centered on a code execution flaw that could have been exploited remotely.

The Shylock banking Trojan has been updated with new capabilities that allow the malware to spread and infect users over Skype.

Researchers from Cylance, a stealth security firm based in Irvine, California, said they were able to hack into a medical management system and take control of other pieces of connected equipment.

The phrase 'Hunt for Red October' no longer refers only to the work of author Tom Clancy, or the film based on his novel.

Big data will transform IT security as the industry shifts towards intelligence-driven security models, according to RSA, the security division of storage giant EMC.

Months after the massive data breach at the South Carolina Department of Revenue where over three million names and Social Security numbers were exposed, residents remain confused about what steps the government is taking to secure their personal data.

With the myriad of smartphone, tablets, applications and network security devices -- along with the growing use of virtualization and cloud services -- all presenting an increasing volume of management and security concerns, network and security complexity remains a major challenge.

Boston, Mass-based CORE Security, a provider of security intelligence solutions, this week launched the latest release of its vulnerability assessment and penetration testing suite, CORE Impact Pro 2013.

Steps Must be Taken To Protect From Expression Language Injection Vulnerabilities On Applications Built on The Spring Framework

Mexico City - Hackers claimed a cyber attack on the Mexican defense ministry website on Wednesday, posting a manifesto from the Zapatista rebel group for two hours. The name of the group "Anonymous Mexico" was visible on the website in front of a black background, with phrases from the manifesto of the Zapatista National Liberation Army (EZLN).

Healthcare data for 38,000 Canadians in British Columbia were inappropriately shared with a university researcher, a government official said Monday.