Don't-Miss Security Stories

New attacks defeat Secure Boot and brick PCs

Security researchers from Mitre found new ways to defeat the Secure Boot feature in UEFI and install boot-level rootkits

PCWorld News

Hackers put security tool that finds payment card data into their arsenal

Cracked versions of Card Recon, a PCI compliance tool, have been found in malware

PCWorld News

Massive Flash exploit campaign directed at Japan seeks financial data

Legitimate websites in Japan have been compromised to serve up malicious code, Symantec said

heartbleed primary

Tech giants throw money at OpenSSL in response to Heartbleed

Crucial open-source projects including OpenSSL will get at least $5.4 million in funding over three years.

PCWorld News

Vessel-tracking system vulnerable to denial-of-service, other attacks, researchers say

Attackers could disable Automatic Identification System communications over large areas or send fake localization information to ships

PCWorld News

Iranian group created fake news organization as part of hacking campaign

Active since 2011, the group targeted more than 2,000 U.S. military members, defense contractors and lobbyists, iSight Partners said

PCWorld News

Call recording software used by police is deeply flawed, advisory says

Organizations using Nice Recording eXpress should shut it down until it is fully repaired, SEC Consult said

Symantec acquires NitroDesk for email security on Android

NitroDesk specializes in securing and managing corporate data in bring-your-own-device workplaces

10 encrypt usb flash drive with truecrypt

TrueCrypt now encouraging users to use Microsoft's Bitlocker

The TrueCrypt Web page is now encouraging users to instead encrypt files using Microsoft's Bitlocker technology, because of apparent security issues. Is TrueCrypt dead?

cyber security

Microsoft simplifies security updates with MyBulletins

Tired of wading through Microsoft's security updates to find out which ones are relevant? Microsoft has a new tool to help with that.

find my iphone

Apple hints password reuse, not iCloud hack, at heart of locked iDevice ransom attacks

A compromise of Apple's services is not to blame for the recent ransom lockouts via Find My iPhone, according to the company.

ebay primary

New security problems keep eBay on edge

Independent security pros are finding all kinds of flaws in eBay's networks.

LulzSec leader sentenced to time served

A judge praises the computer hacker for his cooperation in preventing other attacks