Malware

Organizations suffer SQL Injection attacks, but do little to prevent them

VMware promises Heartbleed patches for affected products by the weekend

The company has identified over two dozen affected product versions so far and is releasing updates

TrueCrypt source code audit finds no critical flaws or intentional backdoors

Some vulnerabilities were identified but are likely accidental, security auditors from iSEC Partners said

Google patches Android icon permissions attack

FireEye found malware that could change other icons, sending victims to phishing sites

Jetpack for WordPress pushes patch for two year-old flaw

AT&T hacker Weev released from prison after appeals court overturns conviction

A federal appeals court has ruled that the venue for Auernheimer's prosecution wasn't appropriate

Tests confirm Heartbleed bug can expose server’s private key

CloudFlare said its challenge shows how dangerous is the OpenSSL bug

IRS misses XP deadline, pays Microsoft millions for patches

Tax collector has 58,000 PCs still running the aged XP; will spend $30M to upgrade to Windows 7

Tip of the Hat: Heartbleed exposes an open source failing

The OpenSSL open source project created a widely used encryption package, but lacks the funds and volunteers needed to support it

Heartbleed flaw affects mobile apps, too

Many banking, mobile payment apps connect to servers vulnerable to OpenSSL flaw, says Trend Micro