Security researcher Brian Krebs has completed his latest research into a relatively new type of crimeware called PPI – pay-per-install – where criminal gangs are now paying commissions to third parties for any malware infections they achieve.

Google has awarded researchers close to $10,000 for identifying security flaws in its Chrome web browser; version 12 fixes 15 vulnerabilities in total.

Roughly 1% of Citigroup’s 21 million North American customers’ credit card accounts were hacked, the bank has admitted.

European Union data protection regulators have called for an investigation into a Facebook feature using face-recognition software to help tag people in images on the social media website.

The high profile failure of a state-of-the-art biometrics system at a major international travel hub in Malaysia last weekend has sent shockwaves throughout the global biometrics industry.

Ocean Bank is not legally responsible for a cyber heist of $588,000 from a customer’s online account using the Zeus trojan, according to a ruling by a judge in Maine.

Oracle surprised many of its software developers and vendors with a major update of the Java programming language this week. Although scheduled as part of its monthly update, the patches tackled no less than 17 security problems.

If companies employ pen testers to check their security out – why not mobile phone vendors? Which is pretty much what Samsung have done with their new Galaxy S2 smartphone, by handing the unit over to a hardware hacking group for custom ROM development.

A Tokyo-based Symantec researcher claims to have discovered another batch of infected Google Android apps, subverted by what he calls the follow-up to the now-infamous DroidDream malware.

Kaspersky Lab claims to have discovered the Amazon Web Services (AWS) cloud computing resource hosting Brazilian banking malware and, whilst this is not unknown, it also claims that Amazon has not responded to its reports about the darkware.