Beyond addressing details about its big breach of 2011, RSA Security executives this week outlined its 2012 product strategy that is centered on three areas, mobility, anti-threat and cloud security.

An experimental method for two-factor authentication to websites employs mobile phones in a new way to ensure that users' online accounts don't get hijacked.

Google Apps administrators can now remotely deactivate browser cookies that contain their end-users' sign-in credentials, a move designed to improve security in Google's hosted applications suite.

IronKey rolled out its Trusted Access for Banking USB drive on Monday.

VeriSign is introducing a certification service that confirms whether a business is legitimate and that their Web site is free of malware.

Security measures such as one-time passwords and phone-based user authentication, considered among the most robust forms of security, are no longer enough to protect online banking transactions against fraud, a new report from research firm Gartner Inc. warns.

A Seattle computer security consultant says he's developed a new way to exploit a recently disclosed bug in the SSL protocol, used to secure communications on the Internet. The attack, while difficult to execute, could give attackers a very powerful phishing attack.

In the face of mounting threats from hackers, MasterCard will use mobile phones to improve security for online transactions, the company said on Monday.