Security News

Researchers have uncovered a vulnerability in an obscure component of many virtualization platforms that they say can allow an attacker to escape from a guest virtual machine and gain code...

Tens of thousands of home and office-based routers have been hijacked over the last several months to stage a distributed denial of service attack campaign.

Mozilla has fixed 13 security flaws in Firefox 38, including five critical vulnerabilities. The new version of the browser also includes a feature that enables the use of DRM-enabled video content...

The May 2015 Microsoft Patch Tuesday security updates include 13 bulletins, three of them rated critical for bugs in IE, font drivers and Windows Journal.

Adobe released security updates for Flash, Reader and Acrobat, patching 52 vulnerabilities.

For many years now, the browser has been the most dangerous piece of software on most users’ machines. Attackers love to target browsers and a remote code execution bug in a major browser is gold...

The Angler exploit kit is pushing yet another new variant of the TeslaCrypt and AlphaCrypt ransomware. It is similar to Cryptolocker but remains unnamed.

Datapp, a Windows program developed at the University of New Haven, sniffs out unencrypted mobile data sent over HTTP.

A researcher warns users of the extensible Z-Way controller project that a weakness built into the software could easily expose it to attacks.

Ed Felten, a professor at Princeton University and a well-respected voice on security and privacy issues, is joining the White House as the deputy CTO. In his new role, Felten will be working...