A new study shows senior managers account for some of the greatest security risks because they are prone to take work, and thus security vulnerabilities, home with them.

A Utah law firm has filed a class action lawsuit against Target, alleging the retailer owes no less than $5 million in damages for its recent data breach.

Defense officials see cyberattacks as the greatest threat to U.S. national security, a survey released Monday says. Forty-five percent of respondents to the Defense News Leadership Poll named a cyberattack as the single greatest threat – nearly 20 percentage points above the second ranked threat: terrorism.

The Chief Information Security Officer (CISO) not only protects IT systems with special hardware, software and secure business processes, but he or she also creates, implements and communicates the organization’s digital information security policies and procedures.

Small business doesn’t necessarily mean small data. In fact, according to Michael Bruemmer, vice president at Experian Data Breach Resolution, thieves prefer to target small- to medium­–sized businesses (SMBs) because many lack the resources or expertise to manage cybersecurity. Retailers are especially easy targets for cybercriminals who look to hijack credit card data, but customers aren’t the only victims.

Let’s start with the good news. Malicious insider activity is relatively rare. Unfortunately, even though outsiders account for 85 percent of cybersecurity incidents, the damage often is substantially greater when an insider strikes.

House Majority Leader Eric Cantor intends to introduce new legislation to make HealthCare.gov more secure.

In 2014, McAfee Labs expects that Ransomware will proliferate on mobile devices, attacks using advanced evasion techniques will come of age, and social platforms will be used more aggressively to target the finances and personal information of consumers, and the intellectual property and trade secrets of business leaders.

Security experts at Unisys Corporation predict that the coming year will usher in broad-based adoption of encryption as enterprises respond to recent disclosures that unencrypted data traffic inside enterprises is vulnerable to detection from outsiders.

Shoppers who used credit cards or debit cards at Target between November 27 and December 15, 2013 may have been hacked.