Media Coverage

Security experts are warning that malicious ads have found their way onto YouTube, putting tens of millions of users potentially at risk from infection by the infamous Kovter ransomware.

Digital thieves go where there are the most clicks. And now hackers are sneaking malware into pop-up ads of some of the Internet's most trusted sites, including YouTube, according to security blog Trendmicro.com.

The large-scale hacking attack against Wall Street this summer was more significant than the public realizes, analysts say.

Sears Holdings Corp (SHLD.O) said it was the victim of a cyberattack that likely resulted in the theft of some customer payment cards at its Kmart stores, the latest in a series of computer security breaches to hit U.S. companies and dealing a fresh blow to the struggling U.S. retailer.

What a difference a few months can make. Shortly after the Heartbleed bug caused a panic in security circles, along comes something which could be even more serious and the reaction seems to be one big yawn.

Attacks exploiting the Shellshock vulnerability (actually, vulnerabilities) are popping up daily, but while Shellshock attacks on web apps have been the most documented and discussed, attacks via other attack surfaces are possible, too.

Attackers have been leveraging Shellshockvulnerabilities to deliver malware since the issue was disclosed in late September, and now researchers with Trend Micro have observed a Bash bug payload – detected as TROJ_BASHKAI.SM – downloading the source code of KAITEN malware.

CEO Andrew Monshaw says Pulse's mobile security products and MobileSpaces' technology give the company a complete portfolio.

In wake of the massive data breach at JPMorgan Chase (JPM), which compromised the contact information of 76 million households, consumers can take comfort that the hackers weren't able to access any confidential information. Unfortunately, the story isn't over.

Hackers are failing to exploit Bash flaws emerging in the wake of the Shellshock bug, according to security firm Trend Micro.

Internet security research group Trend Micro has revealed on their blog about the discovery of a new botnet, one which took advantage of vulnerabilities found in the Bash Linux command control center, known more commonly now as the “ShellShock” bug.

Cyber attackers pulled off the largest-ever data breach on a bank this summer. But the theft of contact information for 83 million JPMorgan Chase personal and business account users isn’t the most worrisome thing about the hack, experts say.

High-profile cyberattacks, like the one JPMorgan Chase revealed thatpotentially compromised 76 million households, would logically lead one to think that bank and credit card data are a hacker's primary target.

JPMorgan Chase labels as inaccurate an Oct. 2 New York Times report about a second data breach against the financial institution.

A Mac that runs the OS X operating system is still far more secure than a PC running Windows. But that’s not to say Macs aren’t at risk.

Do I really need to be worried about all these bugs and vulnerabilities, or is this stuff tech companies need to care about? Can someone actually use these against me?

Security software provider Trend Micro will share its threat information analysis with global police agency Interpol for the next three years, in a bid to bridge the gap in information sharing between the public and private sectors.

In the wake of this week's news that a second point-of-sale breach has struck grocery chain SuperValu, experts warn many more retailers are likely to suffer a similar fate.

Twitter is a popular way for millions of people to connect online. It is also a popular way for attackers to spread malicious content.

Another day, another breach, and this time a repeat victim. Grocery store chain operator Supervalu said it discovered a second point-of-sale cyberattack during the investigation into the one it announced last month.

Delivering a lethal dose of insulin, remotely stopping a pacemaker or even administering a deadly shock through a defibrillator are all real possibilities in the world of medical cybercrime, NBC 5 Investigates has found.

From Thursday on, several security firms reported a drastic uptick in the number of attacks that leverage the recently disclosed vulnerability in GNU Bash (CVE-2014-6271), widely known as Shellshock.

The new vulnerability in the Bash shell is the worst we've seen in many years. No software on critical systems can be assumed as safe.

Attacks against the Bash bug increase in volume and variety, with an emphasis on information gathering and botnet building.

As organizations work on a fix for the Bash system software flaw, security experts warn the response to this vulnerability is far from over.