Latest News

Defending Against Attacks Requires Good Technology, But Companies Must Also Have Effective Management Systems and Best Practices in Place.

Duqu Installer Exploited Windows Zero-Day to Infect SystemsTaking another page from Stuxnet, it seems the attackers behind Duqu used a Microsoft Windows zero-day as part of their attack campaign.

Report Indicates Many Organizations Not Adequately Prepared for Persistent APT Onslaught

Saying you’re secure is one thing; having the metrics to prove it is another, particularly when it comes to justifying security budgets.Having metrics to focus on can make these conversations easier, security pros say.

Typosquatting is no longer a risk to be delegated entirely to brand managers in the legal and marketing departments.

Check Point Software Technologies is set to acquire governance, risk management and compliance (GRC) vendor Dynasec to help customers handle regulatory requirements.According to Check Point, the buy will bolster 3D Security, Check Point’s vision for combining policies, people and enforcement in the name of security. The financial terms of the deal are not being made public. However, Check Point did give hints regarding its plans for the new acquisition.

It won’t be long before attackers discover that your home automation system is connected to everything.

Internet security firm Bitdefender announced the availability of its new cloud-based endpoint security offering this week.Designed to deliver the benefits of an on-premise enterprise security solution, “Cloud Security for Endpoints by Bitdefender” is built to provide a simple and flexible solution to protect end-user systems and servers without the overhead of additional software, hardware and IT staff.

At Least 48 Companies Targeted in Cyber Attacks Across Several IndustriesAttackers have been targeting chemical and defense companies around the world in a cyber-campaign designed to steal information.

Rush for New Technology Often Makes Security an After-Thought, Putting Organizations at RiskAccording to Ernst & Young’s just-released 2011 Global Information Security, organizations are rushing to adopt new technologies including cloud computing, tablets and social media, but are often leaving security as an after-thought.

Researchers at Symantec have uncovered a way to fool Facebook users into defeating the social network’s defense against cross-site request forgery attacks.

After one of their own was kidnapped while participating in Operation PaperStorm, Anonymous has threatened to expose the Zetas drug cartel unless the Anon is released. The comments, made in a video posted to YouTube, inform the Zetas family that they’ve made a huge mistake with the kidnapping, and give them until Saturday to respond.

Visibility and Control over as Much Network Traffic as Possible will Leave Malware with Fewer Places to Hide.

In Mumbai, Indian authorities seized components from servers in a data center, after Symantec informed them that they were communicating with the command and control (C&C) infrastructure used by Duqu, the Trojan that is touted as the precursor to the next Stuxnet. However, experts are now saying that the connection between the two malicious programs is questionable.

Initiative Will Focus on Creating Cyber Education Programs for K-12 through Career and Technical Education Levels.The National Cyber Security Alliance (NCSA), acting on behalf of the National Cybersecurity Education Council, has signed a memorandum of understanding with the US Dept. of Education (DOE), to establish cybersecurity related training programs in schools across the nation, grades K-12.