SecurityWeek

SINGAPORE - A rash of website hackings in the Asia-Pacific has exposed weak cyber defenses which must be improved to help the region deal with more sophisticated and sinister threats, particularly from criminal organizations, analysts said.

LONDON - Britain's top spy chiefs warned in an unprecedented television appearance on Thursday that Al-Qaeda and other enemies were "lapping up" intelligence leaks by Edward Snowden and using them to change the way they operate.

According to a recent study from ThreatTrack Security, nearly 6 in 10 malware analysts at U.S. enterprises have investigated or addressed a data breach that was never disclosed by their company.

WASHINGTON - The CIA pays AT&T more than $10 million a year to provide phone records with possible links to suspected terrorists, the New York Times reported Thursday, citing government officials. The arrangement is voluntary and there is no court order requiring the company to cooperate with the Central Intelligence Agency, officials told the Times.

Public cloud provides a wide spectrum of services, from Infrastructure-as-a-Service (IaaS), Platform (PaaS), through to Software-as-a-Service (SaaS). SaaS is likely the most familiar, since the vast majority of organizations have consumed a SaaS application in one form or another. While traditional hosting services have evolved away from bare metal to form IaaS, and generally up the stack to PaaS, including security as part of the service will change as security gets baked-in closer to the infrastructure.

SYDNEY - An Australian man claimed Friday to be the victim of a massive bitcoin robbery, saying hackers had stolen more than one million dollars of the digital currency from his website.

SAN FRANCISCO - Silk Road, the online black market bazaar for drugs, hacker tools and other illicit goods, says it is back a month after the FBI took down the website.

WASHINGTON- The White House is looking at ending a policy that gives a single military officer authority over the National Security Agency as well as the US cyber warfare command, officials said Thursday.

It's official – PCI 3.0, the latest version of the PCI Data Security Standard (PCI DSS) and Payment Application Data Security Standard (PA-DSS) have now been published. Fortunately for businesses however, they have more than a year before they have to fully make the transition.

SINGAPORE - Singapore Prime Minister Lee Hsien Loong's official website was hacked Thursday by apparent members of activist group Anonymous after he vowed to hunt down anyone who attacks the city-state's technological network.

Microsoft plans to release eight security bulletins this month for Patch Tuesday, including three ranked 'Critical.' The most serious updates affect Internet Explorer and Windows. The remaining five bulletins address issues in both Windows and Microsoft Office.

BRASïLIA - Brazilian judges have given US Internet search giant Google until Saturday to turn over private data collected through its Street View program, press reports said Thursday. Failure to do so would mean a daily fine of $50,000, up to a maximum of $500,000.

Hardware-accelerated DDoS Protection Safeguards Applications and Networks F5 Networks this week announced what the company says it its most comprehensive on-premises DDoS protection solution available in a single product.

Evolve or adapt? For enterprises today confronted by increasingly intricate – and damaging – cyber threats, there may no longer be a viable choice: We must carefully phase out the evolutionary-rooted security tactics which organizations have depended upon for decades.Such a move would pave the way for adaption.

Fresh off of news that it had raised $18.5 million in an oversubscribed Series C funding round in late August, HyTrust, a provider of policy management and access control solutions for virtual and cloud environments, announced that it has acquired HighCloud Security

According to a recent survey conducted by Workshare, most employees (81%) access work documents on the go, but most (72%) are using unauthorized file-sharing services.

THE HAGUE - A group of lawyers, journalists and privacy advocates in the Netherlands is taking the government to court to prevent Dutch intelligence using phone data illegally acquired by the US National Security Agency.

The pitchforks are gleaming and torches burning bright, but it’s hard to figure out where the angry mob is marching. People are screaming “Privacy!” but it’s confusing who they’re screaming at. That’s why I thought I’d pen a timely guide to the current privacy outrage. Confusion stems from there being four plot lines going at the same time. The four protagonists for these sagas are:

WhiteHat Security, a Santa Clara, California-based company best known for its Web application security testing solutions, today announced support for analyzing source code written using PHP programming language within its static code analysis solution.

IID, also known as “Internet Identity”, announced on Tuesday that it has raised $8 million in Series A funding from Bessemer Venture Partners (BVP).