The ongoing cyber-attacks by Anonymous on US government websites are being made possible thanks to an exploit for Adobe ColdFusion.

A new vulnerability in Lenovo network storage devices has been uncovered. The flaw can potentially be exploited by an attacker to gain unauthorized remote read-only access to network-attached storage (NAS) shares.

This year has seen a few high-profile wins for the good guys in the form of botnet takedowns, especially those by Microsoft and Symantec earlier this year. But at least one security researcher is warning against rejoicing too heartily: the takedowns, h…

Last Thursday the Inj3ct0r Team hacking group claimed on Twitter, “Inj3ct0r Team hacked http://vBulletin.com and http://Macrumors.com.” By Friday vBulletin admitted the breach, and on Monday it was reported that a zero-day vulnerability used against bo…

CryptoLocker, the ransomware menace that has been snowballing in profile of late, is stepping up its game even further. The UK’s National Crime Agency (NCA) is warning that its National Cyber Crime Unit are aware of a mass email spamming event that is …

US public companies are more forthcoming with details regarding their cybersecurity risk profiles – and more transparency regarding cyber-risk and cyber-attacks is expected to drive greater adoption of cyber-insurance as a means of demonstrating better…

Back in August the FBI announced that it had neutralized Anonymous “because of the dismantlement of the largest players.” This seemed to be confirmed with the October arrest of Brit Lauri Love for hacking thousands of networks including those of federa…

Over the past few weeks, Dragos Ruiu has provided details of a mystery infection that first attacked his computers some three years ago. He can’t find it, he can’t get rid of it, it survives reboots and clean installs, and seems to spread via wireless …

Masterminds behind a large-scale cyber-heist at Fidelity Investments in California have been arrested.