The lilupophilupop.com SQL injection attacks, first analyzed by the SANS Internet Storm Center in early December, have topped one million infected pages.

Indian researchers Aditya Modha and Samir Shah have uncovered a cross-site scripting (XSS) vulnerability in WordPress 3.3.

Kaspersky’s lengthy investigation into the Duqu worm concludes that it comes from the same developers as Stuxnet. This, potentially, has serious implications.

A UK lawyer has called on the government to redirect its reforms of the Regulation of Investigatory Powers Act (RIPA) away from local authorities and toward journalism.

Online community Care2 has notified its close to 18 million members that the site’s servers were attacked, resulting in a security breach.

The PrivateX hacker group breached two Philippine government websites, the Office of the Vice President (OVP) and the Philippine Nuclear Research Institute (PNRI), on New Year’s Day.

PC Recycler provides electronics recycling services to a number of US government agencies, using degaussing to wipe data from the devices before destruction.

Saudi hackers who claim they are members of Anonymous have breached the Israeli ONE sports website and leaked personal information on 400,000 subscribers.

Last month, US defense contractor Raytheon acquired two companies that supply cybersecurity products and services to the US military: Henggeler Computer Consultants and Pikewerks Corp.

Based on its assessment that cyberattacks against critical infrastructure will increase next year, McAfee advises critical infrastructure companies to upgrade their cybersecurity infrastructure.