Criminals carried out more but smaller data thefts last year than in previous years, indicating a shift toward simpler exploits that run lower risk of punishment, according to Verizon's latest data breach report.
As smartphones have grown more powerful and complex, so have the threats against them.
A new week, a new rash of attacks against security vendors, email marketers and banks. It would be easy to point fingers and laugh at the irony, especially in the case of security vendors, but that would be both petty and shortsighted.
A new phishing scam that targets bank and PayPal passwords and other consumer data that criminals use to loot private accounts is designed to beat security built in to Firefox and Chrome Web browsers.
A spike in attacks against IP PBXs that started last fall shows no signs of abating, spawning speculation that those responsible have tapped intobotnets and cloud computing resources to carry out their illegal activities.
Distributed denial of service (DDoS) attacks like the ones that nailed WordPress blogs in early March have been around for decades, but it's only in the last dozen years that they've had enough impact to grab public attention.
The Google Android Market for apps is supposed to be an apps showplace, but the fact that Google this week yanked down about 50 Android apps it found out were malicious came as something of a jolt to many in the security industry.
What's "pervasive memory scraping" and why is it considered by SANS Institute security researchers to be among the most dangerous attack techniques likely to be used in coming the coming year?
E-mails stolen by hactivist group Anonymous indicate that the security company it targeted was proposing to make a “new breed of rootkit” and that it passed along the plan to a technology firm that caters to the federal government.
Android Market's instant-download feature for applications that customers buy has a flaw: It could open up Android devices to malicious downloads from attackers, according to security firm Sophos.
Kasperesky Lab says the anti-virus source code that one of its employees stole three years ago and distributed online cannot harm customers of the company's current products.
The Stuxnet worm attack known to have struck computers at the Russian-built Iranian Bushehr nuclear plant in Iran has serious implications and could have caused "another Chernobyl," a Russian ambassador is said to have advised NATO yesterday, according to a Reuters report.
Security firm NetWitness today announced Spectrum, an appliance for enabling automated malware analysis that works in conjunction with the company's traffic-analysis gear used to spot threats and policy violations.
The University of Southern California has signed a 5-year, $16 million contract with the Department of Homeland Security to expand USC's DETERlab "mini-Internet" security testbed.
A Sophos IT security consultant has issued a warning not to fall prey to malware that uses a PowerPoint presentation demonstrating sexual positions from the Kama Sutra as its lure.
