SecurityWeek

What’s worse, getting punched in the face or having your pocket picked when you’re not looking?Anyone who has experienced either of these distinct pleasures in life can tell you honestly that both really suck, but, the true pragmatist might argue that in the case of the former, at least you probably saw it coming.

New SecurityWeek Series from Vincent Liu - "Lessons from the Trenches on Implementing a Secure Development Lifecycle"

It’s official. The IANA (Internet Assigned Numbers Authority) this week allocated the last IP address blocks from the global IPv4 central address pool.

In the early 2000’s virus writing was all the rage. Think of the massive virus outbreaks that took place. Millions of infected hosts. The Sober virus that infected 218 million machines in seven days. The MyDoom virus sent over 100 million virus-infected emails. The “I Love You” virus infected 55 million machines and collected their usernames and passwords. These attacks were about bragging rights, not money.

Mobile Payments are Growing at a Double Digit Pace, Benefitting both Consumers and Merchants with an Opportunity for Quick, Convenient and Secure Transactions

Microsoft announced new e-mail encryption functionality for Microsoft HealthVault today, allowing clinical partner solutions to send messages to patients securely based on security protocols set forth by the Office of the National Coordinator's (ONC's) Direct Project.

Why Organizations Should be Utilizing Security Information and Event Management (SIEM) Systems to Ferret Out Botnet Infections.Botnets are insidious. They spread like digital weeds and infect thousands to tens of thousands of machines at a time. Their only purpose is to enrich and empower the botnet owners as they infiltrate endpoints on consumer systems, colleges, and enterprises around the world. These botnets are used to send spam, launch denial of service attacks, and – increasingly – to snoop on corporate...

Network security and unified threat management (UTM) solutions provider, Fortinet, in its January 2011 Threat Landscape report, revealed a 61 percent exploitation rate of new vulnerabilities discovered in January and tracked by FortiGuard Labs.Fortinet says that during a typical month, exploit activity falls between 30 percent and 40 percent. Half of new vulnerabilities rated as "critical" were targeted, opening doorways for an attacker to execute any command(s) on a target machine.

Panda Security today announced the launch of Panda Antivirus for Mac Corporate Edition, targeted to companies operating with hybrid computing environments. The new solution provides protection against all types of malware that affect Macintosh computers, regardless if they're running on Mac OS, Mac OS X, Windows or Linux. Additionally, the product prevents Mac desktops, laptops and servers, as well as iPhones, iPads and iPods from spreading malware to other operating systems.

As 100+ New York and New Jersey area mobsters learned recently, “You can run, but you can’t hide.” Does the same apply to hacking?

Despite spam levels being at the lowest level since March 2009 (according to a report released last week from Symantec’s MessageLabs

Five Security Questions You Should Ask Your Cloud Services Provider If you’re in the market for a cloud services provider, you should have several security questions at the ready. Consider it a shopping list of must-haves to run through with any provider, and the best way to ensure you’re getting the most secure and trusted IaaS offering possible.

2010 should be viewed as the year distributed denial of service (DDoS) attacks became mainstream, says Arbor Networks. In its Sixth Annual Worldwide Infrastructure Security Report, released today, Arbor Networks revealed that DDoS attack Size broke 100 Gbps for first time; up 1000% Since 2005.

FireHost Provides Customers with Real-Time View of Attacks That Are Blocked From Their Websites and Applications

Boston based Core Security Technologies, a provider of IT security test and measurement software solutions, today issued an advisory disclosing stack overflow vulnerabilities affecting Cisco's WebEx applications used to conduct Web-based video conferencing. As part of Core Security’s ongoing vulnerability research, Core Security experts have identified two vulnerabilities that can compromise end-user machines and can cause the computers to crash.

More attacks are coming from outsiders, but attacks coming from insiders are showing to be more costly to organizations, according to a recent survey. Additionally, the survey, the 2011 CyberSecurity Watch Survey sponsored by Deloitte and conducted by CSO Magazine, revealed that organizations are seeing more cybersecurity related events, but the events, on average, are costing significantly less than in the previous year.

Network monitoring solutions provider, NetWitness, today announced availability of its products in a cloud-based offering. To meet expanding operational use cases for cloud-based services and transformational virtual data center architectures, cloud-based option of the NetWitness network monitoring platform provides added deployment flexibility and scalability across all operating environments.

While Fraudsters May be Equal in Terms of Rank, when it comes to Sophistication – they are not. The Higher the Sophistication Level of Individuals, the Fewer they are in Numbers

Intel reported today that it has discovered a design flaw in its recently released Intel® 6 Series support chip, code-named Cougar Point, which is estimated to cost the company $700 million to repair and replace.

Best Practices for Virtualizing Email Security Infrastructure