Legitimate sites serving up stealthy attacks
The Random JS infection kit serves up malicious code that hides itself by attempting to compromise each visitor only once and using a different file name each time.
Xbox Live account theft puts users at risk
Hackers take over the Xbox Live account of a celebrity gamer and make off with a prized piece of virtual armor. Does the Microsoft online service put the security of its users at risk?
Malware hitches a ride on digital devices
Some consumers reported that their holiday gifts came with an unwelcome passenger, a Trojan horse. Infections at the factory and in retail stores will likely become more common.
Senate delays vote on spy bill
A bill that would modernize the United States' legal framework for eavesdropping and grant telecommunications companies retroactive immunity for wiretapping customers will have to wait until January.
Researchers reverse Netflix anonymization
Two computer scientists show that a large set of transactional data poses privacy risks by finding a way to link movie ratings from the Netflix Prize dataset to publicly available information.
Group drafts rules to nix credit-card storage
The organization responsible for technical and best-practice standards in the payment industry plans to require the makers of merchant software to certify that their programs do not store sensitive data.
Bot master owns up to 250,000 zombie PCs
A computer security consultant pleads guilt to using massive botnets to illegally install software on at least 250,000 machines and to steal online banking identities.
Task force aims to improve U.S. cybersecurity
A blue-ribbon panel of three dozen security experts hopes to craft a strategy to improve cybersecurity by the time the next president takes office.
Court filings double estimate of TJX breach
Online attackers stole information on more than 94 million credit- and debit-card accounts, more than double the original estimates, according to court documents.
Identity thieves likely to be first-timers, strangers
Six years of U.S. Secret Service cases reveal that the majority of identity thieves do not know their victims and do not have a prior criminal record.