Second malware attack targets commercial bank, worldwide financial network says

SWIFT, the financial messaging platform used by 11,000 banks around the world, was also targeted by malware in the $81 million cyber heist on Bangladesh Bank earlier this year. 

By Justine Brown • May 12, 2016

Spear-phishing campaign exploiting Windows zero-day vulnerability hits retail, hospitality industries

Over 100 companies were hit with phishing campaign designed to steal customer credit card data, FireEye researches said. 

By Justine Brown • May 12, 2016

To boost interest in cybersecurity, Facebook makes hacking game open source

The social network hopes that by opening up its hacking game, more people will become interested in cybersecurity, including the next generation of tech professionals. 

By Justine Brown • May 12, 2016

7 departing FDIC employees took 160,000 US residents' personal bank account info with them

FDIC CIO Lawrence Gross Jr. told a congressional oversight subcommittee Thursday that he believed the data breaches were "inadvertent."

By Justine Brown • May 12, 2016

Report: Data breach threats loom over financial services firms

Nearly one in five financial services respondents indicated they had suffered a data breach in the last year. 

By Justine Brown • May 12, 2016

House bans Yahoo Mail, Google-hosted apps following uptick in ransomware attacks

A spokesperson declined to confirm whether or not any of the recent ransomware attacks were successful. The House of Representatives IT department said it is continuing the ban "until further notice."

By Justine Brown • May 12, 2016

Homeland Security issues warning over SAP bug the company patched six years ago

The security warning from the U.S. Department of Homeland Security's Computer Emergency Response Team underscores the importance of enterprise follow-through in patching software vulnerabilities.

By Justine Brown • May 12, 2016

Report: Computers, phones often lack basic security hygiene

Duo Labs examined two million devices, all of them running Duo's two-factor authentication application, and found that the devices often had out of date applications. 

By Justine Brown • May 11, 2016

Working with 8 universities, IBM's Watson takes on cybersecurity

The project could eventually enable enterprises to automatically identify threats and help address the cybersecurity skills gap.

By Justine Brown • May 11, 2016

Access clash costs some companies critical virus data

Some industry experts say the change will increase exposure to hackers.

By Justine Brown • May 10, 2016

FTC, FCC launch mobile device security inquiry

The agencies are asking -- and in some cases, requiring -- mobile device manufacturers and mobile carriers to provide information on vulnerabilities and patches.

By Justine Brown • May 10, 2016

FireEye names new CEO following continued market struggles

David DeWalt, CEO and chairman of the board, is stepping down on June 15 but is staying with the company to assume the title of executive chairman. 

By Justine Brown • May 9, 2016

Stolen Google, Mail.ru email credential trove contains primarily 'bogus' account info

Google and Mail.ru, Russia's largest email provider, said they had not been hacked and that many of the credentials were invalid. Yahoo Mail and Microsoft Hotmail have yet to comment. 

By Justine Brown • May 8, 2016

Report: Ransomware takes over as greatest security threat

Kaspersky Lab researchers said use of ransomware was up 14% in the first quarter and the number of attacked users increased 30%. 

By Justine Brown • May 8, 2016

DDoS attacks could cost businesses $100K or more per hour, survey finds

A new report from Neustar that surveyed 1,005 directors, managers amd C-suite executives about distributed denial of service (DDoS) attacks found such attacks are increasingly debilitating and costly. 

By Justine Brown • May 5, 2016

Box announces government-focused cloud service

The new solution meets FedRAMP security and compliance standards, making it easier for government agencies at all levels to use the content management platform. 

By Naomi Eide • May 5, 2016

Expert: Cyber insurance will generate $5B in premiums by 2020

Though it’s still relatively new, the cyber insurance market earned $2.5 billion in premiums in 2015.

By Justine Brown • May 5, 2016

Report: Dated bugs concealed in open-source components

A new report found that 67% of the 200 commercial applications it reviewed over a six-month period contained vulnerable open-source components.

By Justine Brown • May 5, 2016

FBI sees 'unbelievable' uptick in ransomware attacks

The assistant director for the FBI’s Cyber Division advised affected organizations not to pay ransoms to avoid encouraging hackers.

By Justine Brown • May 5, 2016

Reuters: Security expert finds over 270M stolen credentials for sale

In an online forum, the hacker offered to sell the entire cache of data for less than $1.

By Justine Brown • May 5, 2016

Microsoft CEO explains why the company is suing the US government

Satya Nadella, the company's CEO, said that the government needs to protect citizens' security without overreach.

By Justine Brown • May 4, 2016

Defense Department developing tech to track, identify hackers

Today, hackers can easily cover their tracks and avoid punishment. But the Pentagon is working on a tool that could reveal hackers' obscured identities. 

By Justine Brown • May 4, 2016

Identity thieves steal W-2 data from ADP

The payroll, tax and benefits administration company provides resources for more than 640,000 businesses, but the company said only a small number of clients were impacted by the fraud. 

By Justine Brown • May 4, 2016

W-2 related phishing scams see huge growth so far in 2016

Since January, more than 60 organizations said they have been victims of such incidents.

By Justine Brown • May 3, 2016

Report: Third parties increasingly pose data security risk

As a result of "negligent or malicious" third parties, organizations have spent an average of $10 million responding to security incidents. 

By Justine Brown • May 2, 2016