Researchers discovered a treasure trove of nearly two million pilfered credentials from a variety of companies, including Facebook, Google, Yahoo and Twitter.
After recently impacting banks in South Africa, the malware is now infecting point-of-sale systems throughout the globe, including those in the U.S., a security firm found.
Saudi Arabia and Israel are seeking to disrupt Iran's nuclear program by using a computer worm more destructive than Stuxnet, according to Fars News Agency in Iran.
The worm, called "Darlloz," exploits a PHP vulnerability to spread amongst Linux users.
In the spirit of keeping up with advancements in information security, we take the December issue to examine those companies that will likely generate advancements.
Over the last two months, attackers have opted to spread the malware via the Neutrino exploit kit, researchers found.
The National Security Agency is said to have infected more than 50,000 computer networks worldwide with malware that steals information.
Attackers have concocted a type of social engineering scam that delivers malware by duping people into thinking that their anti-virus programs need to be updated.
Finding ways to bypass or validate digital signatures on PCs and Android-based mobile devices in an attempt to distribute malware is fast becoming a new trend among attackers.
The troublesome CryptoLocker malware has claimed another victim: a Massachusetts police department.
Although it has yet to be discovered in the wild, researchers have uncovered a sneaky piece of financial malware, known as i2Ninja, being sold on a Russian cyber crime forum.
In a bid to evade detection, attackers are getting phony anti-virus software onto computer systems by using stolen digital certificates.
More than 12,000 victims have been claimed in less than a full week by a nasty piece of malware known as CryptoLocker, according to researchers.
The backdoor trojan, dubbed "Fokirtor," was discovered in June by Symantec researchers.
A U.S.-based website used as a forum to discuss security policy has become host to a drive-by attack that leverages an Internet Explorer zero-day vulnerability.
The Chairman and CEO shared the revelations at Australia's National Press Club.
In a survey of 200 security professionals who deal with malware analysis for U.S. businesses, 57 percent revealed they investigated or addressed a data breach their company never disclosed.
A clever phishing email is circulating Brazil, but one researcher suggests this crafty scam will more than likely cross shores to the United States before long.
Microsoft issued an advisory on Tuesday warning users of a zero-day vulnerability being exploited in targeted attacks using emailed Microsoft Office documents.
The FBI has made room on its Cyber Most Wanted list for five criminals that are alleged to have roles in global hacking and fraud crimes.
While already ubiquitous in much of the world, mobile payment options are gaining traction in the United States, reports Stephen Lawton.
The first step toward better protecting an organization is to learn how cyber attacks work.
Web applications as front-ends for databases provide the way into an enterprise through simple attacks, such as SQL injection. We have solutions.
Microsoft released its Security Intelligence Report Volume 15 earlier this week and is strongly encouraging users to upgrade from Windows XP.
Four men were arrested by Dutch cyber crime police and charged with stealing an estimated $1.4 million by using the banking malware known as TorRat.
The Spanish-language ATM malware, which allowed attackers in Mexico to force ATMs to spit out cash, now has an updated English-language version.
Until he presents at a November conference, a 17-year-old researcher told Mozilla that he will not reveal any of the technical secrets behind a piece of malware he wrote for mobile Firefox OS.
The torrent file is actually malicious and leads victims to online surveys.
In recent weeks, a new variant of Sazoora malware has struck around 23,000 machines, with more than 1,800 infections occurring in the U.S.
A group of hackers, known as TeamBerserk, took credit on Twitter for using a SQL injection attack to steal $100,000 from online accounts.