SecurityWeek

Researchers at Proofpoint have uncovered what could be the first significant attack using the 'Internet of Things.'

WASHINGTON - President Barack Obama will Friday announce plans to stop the National Security Agency hoarding hundreds of millions of telephone call records, among reforms to US surveillance programs exposed by Edward Snowden.

For quite some time, there has been an interest in the security industry for a quadrant that’s specifically for attack mitigation systems and services. Gartner has provided a number of “magic-quadrant” reports on arenas such as firewalls, Intrusion prevention systems, SIEM, MSSP and a few others. Additional analysts from firms such as Infonetcis, Forester, and IDC have published security reports but none have covered the attack mitigation market.

LONDON - The US National Security Agency has collected almost 200 million mobile phone text messages a day from around the world, a report said Thursday, in the latest revelations from the Edward Snowden files.

Earlier this week, Twitter announced that all third-party applications that make data requests to the micro-blogging service's application interface (API) must use encryption.

Cloud security vendor CipherCloud has acquired software-as-a-service security provider CloudUp Networks in a deal meant to bolster the company's data protection capabilities.

Juniper Networks has unveiled a new virtualized security platform designed to protect private and public cloud deployments. Called the Firefly Suite, the solution allows customers to attach, create and manage security policy across physical and virtual firewalls.

Cisco paints a grim picture for 2014 in its annual security report, predicting “unprecedented growth” for advanced malicious attacks. The barrage of non-stop attacks is also taking a toll on the defenders.

Threats and attacks are steadily increasing, and business executives face new challenges with trust exploits. While organizations adopt cloud computing and allow employee-owned devices onto the network, the challenge of securing company data increases exponentially. When it comes to advanced persistent threats (APTs), bad actors take advantage of every exploit to steal information, and look for the weakest link in enterprise security systems.

While Google shocked the world earlier this week with its announcement that it would pay $3.2 billion in cash to acquire Nest, the company has also made another acquisition—this time in the security space.

WASHINGTON - After months of gushing intelligence leaks and warnings the US national security state has gone rogue, President Barack Obama will finally give his response to Edward Snowden on Friday.

Microsoft said on Wednesday that it would help customers as they migrate to newer versions of the Windows operating system by extending support to the platform’s antimalware features.

New research from FireEye shows that the Asia-Pacific region was twice as likely to be targeted by advanced persistent threats during 2013 than the rest of the world.

According to a new report from Prolexic Technologies, a provider of Distributed Denial of Service (DDoS) protection services that was recently acquired by Akamai Technologies, mobile applications are being increasingly used in DDoS attacks and are creating mitigation challenges.

US-CERT is warning organizations about a form of distributed denial-of-service attacks that seek to overwhelm victims with UDP traffic via publically-accessible NTP servers.  

NSA Taps Offline Computers with Secret Bug: ReportWASHINGTON - The US National Security Agency has developed a secret technology to spy on computers via radio signals, gathering information even when the devices are offline, a report said Wednesday.

BEIJING - Chinese tech giant Huawei, which has long been dogged by security suspicions abroad, on Wednesday denied a report its telecommunications network equipment had been compromised by US spies. There have been "no network incidents caused by security reasons", Huawei chief financial officer Cathy Meng told reporters.

Since the initial release of PCI-DSS, networks, data centers and threats to cardholder data have continued to evolve, driving further refinement of the standard. While the initial PCI-DSS created a framework for its members to follow, it has evolved to address what we’ve learned from PCI implementations and gaps, as well as technological advances.

Palo Alto Networks has upgraded its security platform with enhancements to its WildFire service that are designed to help organizations detect and fight off malware and exploits.

BERLIN - US-German talks for a "no-spying" agreement in the wake of the NSA espionage scandal are doomed to fail, German media reported Tuesday citing disgruntled Berlin delegation sources.