Malware

Hackers circulate thousands of FTP credentials, New York Times among those hit

A list of compromised FTP credentials is circulating in underground forums

IE10 under attack as hackers exploit zero-day bug

FireEye uncovers attacks emanating from a U.S. website just two days after Microsoft issued huge IE patch collection

Dozens of rogue self-signed SSL certificates used to impersonate high-profile sites

The certificates could be used to launch man-in-the-middle attacks against desktop and mobile apps with poor certificate validation

Cyberespionage operation ‘The Mask’ compromised organizations in 30-plus countries

The attack campaign is highly sophisticated and bears the marks of being a state-sponsored operation, the researchers said

Ransomware like Cryptolocker uses Bitcoin, other virtual currencies for payment

Maintaining PCI compliance is a big challenge for most companies

Many tend to treat compliance as a lone annual event, leaving them vulnerable, Verizon says

Cybercriminals compromise home routers to attack online banking users

Attackers changed the DNS configuration of vulnerable home routers to mount man-in-the-middle attacks against users in Poland

Microsoft plans another short patch slate for next week, but finds a few XP bugs to crush

IE is AWOL from the patch list for the second month in a row

Target attack shows danger of remotely accessible HVAC systems

Qualys says about 55,000 Internet-connected heating systems, including one at the Sochi Olympic arena, lack adequate security

Hackers try to hijack Facebook, other high profile domains through domain registrar

Some registration information for facebook.com was changed, but the domain was not redirected to an unauthorized server