SecurityWeek

VANCOUVER  - [UPDATE] Google co-founder Larry Page on Wednesday condemned US government snooping on the Internet as a threat to democracy.

The creators of the Full Disclosure mailing list have suspended the service indefinitely due to a conflict with an unnamed security researcher.

WASHINGTON - The US government's clandestine PRISM Internet program exposed by Edward Snowden targets suspect email addresses and phone numbers but does not search for keywords like terrorism, officials said Wednesday.

Target's breach should mark the watershed line of the enterprise's security.

Zero-day vulnerabilities tend to grab headlines, but administrators need to be paying attention to known, and already patched, vulnerabilities, according to a new Imperva threat advisory. Even if administrators ignore the older bugs, it's a sure bet that online criminals are not.

Many organizations are looking to expand their use of SMS-based two-factor authentication this year to improve security, according to a new survey by the Ponemon Institute.

Barracuda Networks announced the launch today of Threatglass, a frontend online tool for analyzing web-based malware.

(Image Credit: @TEDTalks)

FireHost, a Dallas-based cloud hosting provider that has made security the focus of its offerings, announced this week that Jim Lewandowski has been named as the new chief executive officer (CEO) of the company.

The Gameover ZeuS Trojan has been updated with functionality targeting bitcoin wallets. Researchers with F-Secure spotted a variant of the malware that includes code to read and write to Bitcoin wallets. It also hooks into the process by which the wallet is encrypted, stealing the password and thwarting encryption.

WASHINGTON - The National Security Agency has technology capable of recording all the phone calls of an entire country and replaying them later, a report based on leaked documents said Tuesday.

Trustwave announced on Tuesday that it has acquired Cenzic, Inc., a maker of application security testing solutions, for an undisclosed sum. Cenzic’s solutions help organizations assess cloud, mobile and web applications for vulnerabilities.

BANGKOK - An infamous computer hacker has been arrested in Thailand at the request of Switzerland on suspicion of hacking into bank computer systems in Europe, an official said Tuesday.

A team of security researchers has uncovered a widespread attack campaign that has infected more than 25,000 Linux and UNIX servers around the world.

SINGAPORE - Cybercriminals are exploiting the disappearance of a Malaysia Airlines plane by luring users to websites purporting to offer the latest news in order to steal their personal information, an Internet security firm warned Tuesday.

Most Businesses Not 'Fully Prepared' to Handle Data Security Incidents

TOKYO - Japan held a government-wide cyber security drill Tuesday in a bid to improve coordination among public agencies and major businesses, as Tokyo prepares to host the 2020 Summer Olympics. The mock cyber attack for the first time brought together 21 government departments and firms in 10 business sectors, including utilities, banking and aviation.

Late last August, some visitors to the New York Times website received an unexpected surprise - the website was down. The source of the interruption was not a power outage or even a denial-of-service attack. Instead, it was a battle against a DNS hijacking attempt believed to be connected to hacktivsts with the Syrian Electronic Army.

Juniper Networks and Verisign have joined forces to provide a hybrid DDoS mitigation service that combines Juniper’s on premise DDoS Secure technology with Verisign’s Cloud-Based DDoS mitigation service.