A security researcher with Computer Associates has carried out an in-depth analysis of the SpyEye trojan and concluded that the malware has been cleverly coded to hide the fact that it is really little more than a clever piece of credential-grabbing code.
A Symantec security researcher is reporting that MBR – Master Boot Record – infections are now back in fashion amongst cybercriminals after several years of largely being ignored.
A data breach at Bay House School in Hampshire has highlighted the importance of not using the same password for different websites and applications, say experts.
Cloud providers can demonstrate their adherence to industry-standard security practices by applying for listing in the Cloud Security Alliance’s (CSA) new Security, Trust and Assurance Registry (STAR).
Noted security researcher and hacker Moxie Marlinspike slammed the certificate authorities at last week’s Black Hat conference in Las Vegas, just before he introduced his own alternative for authenticating secure web communications.
At the Black Hat 2011 event, which has just finished in Las Vegas, security researchers have shown how it is possible to hack a dongle for the iPad – which was originally designed to allow iPads to accept debit and credit card payments – to become a card skimming device.
A threat analyst with Trend Micro claims to have spotted a trojanised Android app in the wild that checks for keywords in text messages, and relays the data back to remote hackers.
After researching the growing problem of APTs (Advanced Persistent Threats) – a security issue first discovered by StoneSoft late last year - Dell SecureWorks claims to have revealed around 60 different types of families of custom malware that use APTs as their infection vehicle.
A 10-year-old code cracker taking part in the first Defcon kids event over the weekend – part of the DefCon 19 event that has just taken place in Las Vegas – has reportedly discovered a zero-day flaw in the way the iOS and Android smartphone/tablet operating systems rely on the system clock.
A US energy industry standards body has warned suppliers to improve their defences against cyber attacks.
Hacktivist group Anonymous and its offshoot LulzSec have published information stolen from rural US police departments in revenge for recent law enforcement actions.
The California Public Utilities Commission (CPUC) has adopted the first privacy and security protections for customer data on smart grid electricity networks in the US.
In-browser security specialist Trusteer is reporting that, a year after adding malware removal to its Rapport software, it has successfully removed banking trojans and similar malware from around 1.6 million users' PCs.
Dasient Research claims that mobile apps running on the Android platform are as vulnerable to drive-by download security attacks as the software loaded onto desktop PCs.
With organizations off all stripes seeking to defend against advanced persistent threats (APTs), a team of researchers from iSEC Partners put the Mac OS X operating system head-to-head with Windows to see how each performs in the realm of enterprise security.
The world of security threats is changing, as the smartphone is now entering the frame as a vehicle for security attacks. That's the underlying message from the latest Fortinet threat landscape report, which claims that a new Android botnet has been seen in the wild.
The National Institute of Standards and Technology (NIST) is launching a pilot program to test the security of the Apple iPad and iPhone for government use.
Webroot has extended its mobile security applications to its partners in banking in order to protect their customers who use tablets and smartphones to conduct mobile banking.
A leading security researcher claims that the volume - and profitability - of fake anti-virus software is now on the wane. But, he adds, there is still a lot of activity in the market, so users cannot breathe that easily just yet.
Following on from the hacking of the Sun newspaper's website last month, in which false news stories were posted, it appears that thousands of customer's details were downloaded during the hack.