Overconfidence is apparently endemic when it comes to a sense of cybersecurity: a new study from Deloitte shows that 88% of companies surveyed don’t think they are vulnerable to an external cyber threat, and half don’t have a documented plan in place i…

Adobe has released security updates for Adobe Reader and Adobe Flash Player, and has re-issued its ColdFusion advisory. The Reader update covers 26 vulnerabilities while the Flash update covers a critical vulnerability.

US security researchers have discovered vulnerabilities in Voice over IP (VoIP) phones from Cisco and other manufacturers that leave them wide-open to phone-tapping and remote listening – and have proposed a new defense, dubbed Software Symbiotes.

Justice for the $5 Foot-Long continues: In the wake of a multimillion-dollar credit-card hacking effort that targeted Subway sandwich shops in the US, one of its central figures has been sentenced in New Hampshire.

With data breaches on the rise and the costs stemming from them escalating exponentially, human error is often the culprit. But there’s a deeper issue: poor application design and faulty programming are all too common.

Tyler is touted as ‘WikiLeaks on steroids.’ The current site (codenametyler.org) is unimpressive – so Infosecurity reached out to Anonymous for an update on its development.

Xiang Li yesterday pleaded guilty to two federal charges relating to the sale of ‘cracked’ sophisticated software sometimes at less than 1/1000th of its retail price. Sentencing is scheduled for May 3.

Security pioneer John McAfee is back in the headlines with a claim that he organized a shadowy group of personal espionage operatives and marshaled keylogging spyware to collect data on top government officials and other powerful people in his adopted …

Security pioneer John McAfee is back in the headlines with a claim that he organized a shadowy group of personal espionage operatives and marshaled keylogging spyware to collect data on top government officials and other powerful people in his adopted …

In the wake of the revelation that browser vendors Microsoft, Google and Mozilla have blocked two faulty SSL certificates generated by Turkish Certificate Authority third-party TURKTRUST, the company has responded that there was no attack, fraud or oth…