Virtual Event: Zero Trust Strategies Summit - Watch all Sessions
Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

A rapid shift in the prevalence of real-time attacks from online banking trojans, such as ZeuS, are now more common than password phishing attacks, according to PhoneFactor, a provider of phone-based multi-factor authentication solutions. Organizations lack understanding about what to do to protect against these threats according to the results of the “state of online banking security” survey released today by PhoneFactor.

Solution Enables Enterprises to Deploy Private Mobile App Stores for the EnterpriseMobileIron, a provider of mobile device management and security solutions, has updated its Virtual Smartphone Platform (VSP) with several new features including the ability to let businesses create private “Enterprise App Stores” and deliver in-house iPhone and iPad apps to their employees without having to post them publicly.

According to a recent study, over 50 percent of companies in the U.K. and U.S. have an Electronically Stored Information (ESI) Disclosure strategy in place, but most haven’t revisited policies to address new communication methods such as social networking (30 percent in the U.K. and 21 percent in the U.S.) and new storage technologies such as cloud computing (28 percent in the U.K. and 16 percent in the U.S.).

The day after Twin Towers fell, all kinds of security measures changed and new ones were implemented overnight. Is there a Web identity 911 equivalent wake-up call coming—a single event that will suddenly jolt us into enforced standards overnight?

Core Security Technologies, a Boston based provider of IT security testing and measurement solutions, today introduced the latest version of its automated penetration testing solution, CORE IMPACT Pro version 11.

Salesforce.com today announced "Database.Com," a new service that it’s calling the first “enterprise database built for the cloud,” leveraging the infrastructure and technology that powers it’s core business of 87,000 Salesforce.com customers. The service isn’t scheduled to be available until 2011, maybe they can can come up with a better logo before the service goes live.

Securing Virtual Environments - VM IntrospectionKnowledge is power and, when it comes to security – the more information you have about your environment – the more effective you can be at protecting it. Depth of information is the fundamental benefit behind a concept called Virtual Machine Introspection (VMI). Its use within virtualized environments is absolutely crucial to effective risk mitigation at scale.

Amazon Web Services (AWS) today announced it has achieved Level 1 compliance with the Payment Card Industry (PCI) Data Security Standard (DSS). Organizations can now run their applications on AWS PCI-compliant technology infrastructure to store, process and transmit credit card information in the cloud. The AWS cloud infrastructure has been validated at the highest level (Level 1) of PCI compliance, to build their cardholder environment and achieve PCI certification for their applications.

What is an Advanced Persistent Threat? Attackers are Getting More Sophisticated - Here's an Example of How they Work and Insight on How to Stop Them.The news just broke: Acme has completed a strategic acquisition of Landmark and both companies are being tight-lipped concerning all of the details. Should the acquisition proceed, that's bad news for Acme's toughest competitor, which would – as a result of the deal – be set to lose a clear market advantage.

Amazon Web Services (AWS) today announced it will offer Domain Name System (DNS) service, which it is calling Amazon Route 53, the name coming from the fact that DNS servers respond to queries on port 53 and route end users accordingly.

In order to reflect the company’s product portfolio and market focus after the acquisition of Atmel Corporation’s Secure Microcontroller Solutions business, INSIDE Contactless today announced it has changed its name to INSIDE Secure.The company's secure semiconductor products power smart cards, mobile devices, acceptance devices and infrastructure systems. INSIDE Secure is headquartered in Aix-en-Provence, France, with offices in Europe, Asia and Silicon Valley.

Many organizations are putting their virtual infrastructures at risk as a result of hypervisor privileges and ‘data sprawl’ in virtual environments not being adequately addressed by current adoption of security technologies and policies, according to a study released today by CA Technologies.The study, "Security-An Essential Prerequisite for Success in Virtualization," surveyed 335 decision makers in 15 countries across Europe and the US.

Facebook is able to see a customer’s User ID, IP address and operating system if the customer is logged into Facebook at the time they visit a site that uses certain features of Facebook Social Plug-Ins. Does this sharing pose a serious privacy risk? “Those who cannot remember the past are condemned to repeat it.” - George Santayana

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.

Cloud Security

Artificial Intelligence

Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.