SecurityWeek

RIM this week released a security advisory to address a vulnerability in the BlackBerry Administration API included in the BlackBerry Enterprise Server that may allow an attacker with user permissions granted to the BlackBerry Administration API to disclose sensitive information or cause a denial-of-service condition.

It looks like Netflix isn’t the only company jacking up its rates this week. VeriSign, the Internet infrastructure giant that ICAAN recently awarded (via renewal) the contract to serve as the authoritative registry operator for the .net registry for another six years, said it would be raising the fees for its domain registration services.

We all have relatives who never see a doctor because they just don’t want to know if there is something really wrong with them. Living a left-brain life (i.e., logical, analytical), I always cringe and unsuccessfully suggest the ‘more information is better’ approach to medical care when my relatives channel their ostrich spirits. Somehow the concept of plausible deniability breaks down when thinking about the early detection potentially fatal disease. Just another confirmation of my adoption.

Below is a Full Text Transcript of Remarks on the Department of Defense Cyber Strategy from Deputy Defense Secretary William J. Lynn III, as the Defense Department's Strategy for Operating in Cyberspace was revealed at National Defense University at Fort Lesley J. McNair in Washington.As Delivered by Deputy Secretary of Defense William J. Lynn, III, on Thursday, July 14, 2011

Add mice and keyboards to the list of UBS-based peripherals now suspect in any corporate environment. In recent weeks several gadget blogs have been discussing new ways to make the USB HID (Human Interface Device) a viable vector for malware. This is hardware hacking that should be of interest to corporate IT staff. While some of these use cases are not elegant, requiring someone to convince someone else to use a modified device, we've seen clever social engineering in the...

The wait is over. New guidance on virtualization from the PCI Council is here.

The results of a recent survey released today by Men's Health Network and Cephalon, found that shift workers, people who work non-traditional hours including IT professionals working overnight shifts, report that these shifts can negatively impact their health, work and well-being.

Related Resource: The Top 10 Reports for Managing Vulnerabilities

 Are Industrial Control Systems Secure?

At Cisco Live, the company's annual IT and communications conference, Cisco today introduced new technology to increase the efficiency and security of cloud-based networks, including new email security features for its IronPort Email Security solution.

Guardian Analytics, a provider of behavioral analytics-based fraud prevention solutions, today announced a fraud monitoring solution delivered as a managed service, designed to allow institutions to enjoy the benefits of fraud prevention software without the need for increased staff or training.

Tripwire, a provider of IT Security and compliance solutions that was recently acquired by private equity firm Thoma Bravo, has released a library of pre-selected “Cybercrime controls” for the company’s Tripwire Enterprise solution that combines key configuration hardening standards with a collection of breach detection rules into an easy-to-install package for Windows servers.

WatchGuard Technologies today announced that it has added SCADA Signatures to its next-generation firewalls and UTMs with Application Control. The SCADA (supervisory control and data acquisition) signatures enable WatchGuard XTM and legacy e-Series security appliances to provide threat protection for industrial control systems that monitor and control industrial, infrastructure or facility-based networks.

NeXpose 2011 Summer Release Brings Increased Deployment Flexibility, Enhanced Integration, Scalability and Improved Administrative CapabilitiesRapid7, a Boston-based provider of vulnerability management and penetration testing solutions, today launched NeXpose® 2011 Summer Release, the latest update of the company’s vulnerability management solution, adding support for private cloud deployments based on its multi-tenant architecture, along with other enhancements.

Operators Sold Networking Gear Supported by Counterfeit Cisco Labels, Boxes, Manuals and Serial Numbers Obtained from Cisco Support SiteAfter selling $1 million worth of counterfeit Cisco equipment through a business operated with a co-defendant, Christopher Myers, 42, of Leawood, Kansas, has been sentenced to 33 months in federal prison.

Following news on Monday that hacker collective Anonymous had breached systems at defense technology contractor giant Booz Allen Hamilton, the company late Tuesday issued a statement, saying its systems were breached as a result of a recent cyber attack.

In its largest coordinated product release ever, VMware today unveiled VMware vSphere® 5 along with a comprehensive suite of cloud infrastructure technologies.

New Solution Delivers All-Inclusive Software Providing 'Secure Everywhere Access' to Help Meet Regulatory and Compliance Requirements Network security vendor Fortinet, today launched FortiClient, an endpoint software agent that brings secure remote access connectivity to remote devices.

McAfee Appoints Michael DeCesare and Todd Gebhart as Co-Presidents McAfee today said President David DeWalt has announced his resignation, and said it would create an office of the president, to be headed by Michael DeCesare and Todd Gebhart who will serve as co-presidents. DeWalt, who served as President for more than four years, will continue as a non-employee member of the McAfee Board of Directors.