SecurityWeek

Hackers are well aware that holes exists in the security of the Internet’s infrastructure. It’s time for the industry to protect the DNS layer.

Stuxnet Showed that Control Systems are Strategic Targets of Larger Powers and That the Consequences can be Extremely Critical.

On Wednesday, SIEM vendor LogRhythm announced the latest release of its SIEM-focused security intelligence platform, LogRhythm 6.0. The release is a step forward, and includes pattern recognition and responsive monitoring, which can act on its own if warranted. In addition, baseline changes offer faster indexing and processing of logs, as well as increased storage capacity.

On Tuesday, in addition to the monthly "Patch Tuesday" security updates for Windows and Office platforms, Microsoft released the eleventh volume of its Security Intelligence Report.

Speaking in London during the RSA Conference Europe, RSA's executive chairman, Art Coviello, and president, Thomas Heiser, addressed the breach that rocked the security world, and left egg on the company’s face.

On Tuesday, Philip Reitinger, Sony’s newly appointed SVP & CISO, announced that Sony was the victim of yet another cyber attack. In this latest incident, Sony detected an attack that tested a massive set of sign-in IDs and passwords against its network database.

A service outage at Research in Motion spanning the past two days has left millions of BlackBerry users in certain parts of the world without the ability to send or receive emails, and in some cases browse the Web from their mobile devices.After a response Monday that offered no information as to the reasons behind the outage, today RIM shared some information on the incident that disrupted service to BlackBerry users across Europe, the Middle East, Africa, India, Brazil, Chile...

Zenprise, Inc., a provider of enterprise mobile management and security software, today said that it has secured a $30 million round of financing led by prominent Silicon Valley venture capital firm Greylock Partners.The cash injection will be used to support Zenprise’s growth and accelerate its product development, sales and marketing efforts, the company said.

Microsoft released fixes for 23 security vulnerabilities today as part of this month’s Patch Tuesday. The patches are tucked away in eight security bulletins, two of which are rated “critical.” The two critical bulletins address vulnerabilities in Internet Explorer (MS11-081) as well as .NET Framework and Silverlight (MS11-078).

Much has been written about the growth of malware targeting Android devices. Earlier this year for example, Damballa found that in the first half of 2011, the number of Android devices engaged in live communication with a botnet command and control server hit 40,000 at one point.

New information from F-Secure shows that the German government appears to have paid €2 million Euros for the Federal Trojan, which the CCC analyzed and publicly reported on last weekend. In addition, several German states have confirmed the software’s usage, according to local media.

Open source web server developer NGINX today announced that it has secured $3 million in a Series A round of financing coming from BV Capital, Runa Capital and an entity affiliated with the private investment firm of Dell Chairman and CEO Michael Dell.

Real Security goes Beyond Compliance, and Integrates with Validation and Security Processes. 

Operation Swiper: More than 100 people have been indicted in connection with what may be the largest identity theft crackdown in the country’s history. The 111 defendants hail from countries all over the world, including places in Europe, Asia, Africa and the Middle East, according to the Queens District Attorney’s office. In a total of 10 indictments, the suspects are charged with defrauding financial institutions and retailers of more than $13 million during a 16-month period.

Earlier this month, a video from Anonymous announced the pending invasion of Wall Street. Shortly after, Anonymous denounced the invasion plans, suggesting they were promoted by law enforcement. Confused? Don’t be. Trap or not, some think it’s a great idea and may choose to take part anyway.“The events transpiring within Wall Street have caught our eye,” the video announcement promoting Invade Wall Street starts.

Story Update: Air Force Officials Share Details on Malware That Infected Drone SystemsComputers controlling American military drones have been infected with a keylogger that tracks pilots’ keystrokes as they remotely fly the unmanned machines around the world, according to a report.

Symantec today released a public beta of version 6.0 of its all-in-one security suite, Norton 360.Version 6.0 of Norton 360 includes the same core security technology that powers Norton Internet Security 2012, and also brings enhanced tuneup and backup capabilities.According to Symantec's internal testing, the version 6.0 beta outperforms version 5.0 on key performance metrics, including an average improvement of over 50 percent on file copy impact.New features and enhancements in Norton 360 version 6.0 beta include:

My previous column emphasized the most prevalent attack techniques used by hackers. By studying thse types of attacks we can enhance our solutions. Here’s how. Remote File Inclusion as a case study

Finnish security vendor F-Secure, along with the U.K.’s Sophos, have each pledged to detect a new backdoor, allegedly developed and used by the German government. The news comes via the Chaos Computer Club (CCC) in Germany, who released a report about the malware on Saturday.

Over the weekend, the “Chaos Computer Club” (CCC), a group considered to be the largest European Hacker Club, said it had identified and reverse engineered a Windows backdoor trojan that the group claims is being used by the German government.