Brian Prince

A new study has found that roughly 20 percent of the 50 most popular plug-ins for the WordPress platform are vulnerable to common Web attacks. According to research from security vendor Checkmarx, that figure represents nearly 8 million downloads of plug-ins vulnerable to issues such as SQL injection, cross-site scripting, cross-site request forgery and path […]

The Open Web Application Security Project cited injection flaws as the top risk facing software developers today in the recent version of its annual list of security threats. The findings are based on data from eight firms that specialize in application security, and span more than 500,000 vulnerabilities across hundreds of organizations and thousands of […]

Getting inside a network is only part of the fight for attackers; the other is avoiding detection for as long as possible. Yet another part is keeping analysts from dissecting and reverse-engineering their malicious wares once they end up in the hands of their opponents. Recently, researchers at Symantec found a backdoor, known as Tranwos, […]

A cyber-espionage operation has been linked to a hacking group based in China that may have been active for as long as a decade. The attack campaign has been dubbed NetTraveler by Kaspersky Lab, and is so named because of an internal string present in early versions of the malware used by the attackers. According […]

McAfee has introduced two new security suites aimed at streamlining security features for its business customers. With McAfee Complete Endpoint Protection, offered in Enterprise and Business editions, the company is looking to simplify management and deployment of its endpoint security technologies throughout an IT environment. “What we are trying to do is give people everything […]

A Chicago man has pleaded guilty to hacking charges in connection with the 2011 cyber-attack on a well-known military and intelligence think-tank. Jeremy Hammond, 28, pleaded guilty to one count of conspiracy to engage in computer hacking and faces as much as 10 years in prison and up to $2.5 million in restitution. According to […]

Hackers have accessed design plans for more than two dozen U.S. weapons systems, according to a confidential report by the Pentagon’s Defense Science Board (DSB) that was leaked to The Washington Post. The affected systems were listed in a confidential version of the report, and include the PAC-3 Patriot missile system and the Navy’s Aegis […]

Iranian hackers have amped up a campaign of cyber-attacks against America’s energy industry, according to a report from The Wall Street Journal. Citing current and former U.S. officials speaking under the blanket of anonymity, the Journal reported that Iranian hackers accessed control system software that could have allowed them to manipulate oil or gas pipelines. […]

Twitter is imposing two-factor authentication to bolster account security in view of recent high-profile breaches affecting Twitter as well as media organizations around the world. In response to the attacks, Twitter announced Wednesday it is rolling out a form of two-factor authentication to provide extra security for users. The new “log-in verification” feature will serve […]

McAfee is mixing the worlds of biometrics, security and storage in its new LiveSafe offering set to be available next month. The LiveSafe service is meant to be a step toward delivering on McAfee’s joint vision with Intel to enable consumers to protect their data and identity on all their devices. As part of the […]

Federal authorities have slapped the cuffs on several alleged members of a cyber-gang who are charged with taking part in a massive heist that stole as much as $45 million in a matter of hours. According to an indictment unsealed Thursday, seven of eight people have been charged with being members of the New York-based […]

Microsoft is planning to release a fix for an Internet Explorer zero-day bug being targeted in the wild this coming Patch Tuesday. The vulnerability, which is being exploited against users of IE8, has been spotted being used in an attack campaign against numerous Websites, including the U.S. Department of Labor site. Users of Internet Explorer […]