SecurityWeek

The (ISC)2 security professional association released a new survey showing that C-level executives consider application vulnerabilities and mobile devices as being the biggest threats to security.

Kaspersky Lab has uncovered details on what they believe is a small yet sophisticated and determined group of attackers targeting several industrial and high tech organizations in South Korea and Japan.

As the first layer of defense in your network, it is important to take a step back and review the design of your perimeter security.

Cisco released its semiannual IOS Software Security Advisory Bundled Publication on Wednesday.

WASHINGTON - The National Security Agency eavesdropped on civil rights icon Martin Luther King and heavyweight boxer Muhammad Ali as well as other leading critics of the Vietnam War in a secret program later deemed "disreputable," declassified documents revealed Wednesday.

WASHINGTON - The US Air Force has test flown an F-16 fighter jet without a pilot on board for the first time, in the latest sign of the military's increasing reliance on drones.

SAN FRANCISCO  - Twitter on Wednesday launched a system for emergency alerts which can help spread critical information when other lines of communication are down. The popular messaging service said its Twitter Alerts could be useful in natural disasters or other emergencies when traditional channels may be overloaded or unavailable.

Software giant Oracle said on Wednesday that it now offers a “complete Identity Governance solution” that lets organizations balance the objectives of access, security, and compliance, while enabling user self services to reduce total cost of ownership.

WASHINGTON - The head of the National Security Agency Wednesday defended US surveillance programs as part of a "noble" mission to protect the nation and said reports on them were "sensationalized."

Arbor Networks and other service providers have reported that Sudan essentially dropped off the Internet on Wednesday. According to data from Arbor Networks, Internet traffic from Sudan dropped off starting around 9am EST on Wednesday.

These days, everything’s “smart.” Everything’s “connected.” Cars, watches, thermostats, power meters, home security systems, glucose meters, toilets, you name it. On the one hand, this Internet of Things is amazing. These devices are cool. They’re convenient. They’re capable of remote control. Some of them can even save you money. It’s an explosion of ingenuity.

The Cloud Security Alliance (CSA) has teamed up with BSI, an organization that provides standard-based solutions and services, and has announced a new third party certification program designed to assess the security of cloud service providers.

CyberArk, a provider of enterprise security solutions that help companies secure and manage privileged accounts, today announced the availability of Master Policy, what the company describes as a “bold new policy engine” that enables customers to set, manage and monitor privileged account security through a single interface.

Swedish Court Reduces Sentence for Pirate Bay Founder STOCKHOLM - A Swedish appeals court on Wednesday halved a jail sentence on hacking charges handed down to a co-founder of the popular file-sharing site The Pirate Bay.

NEW DELHI  - The US National Security Agency targeted the Indian embassy in Washington and the Indian UN office in New York with sophisticated surveillance equipment that might have resulted in hard disks being copied, a report said Wednesday.

Cisco Systems has released an open source tool designed to make life easier for penetration testers.

New research from IBM's X-Force team names SQL injection as the most commonly traveled pathway to a successful breach during the first half of 2013. According to IBM, 26 percent of the hundreds of breaches it examined this year were linked to SQL injection.

The root cause of many serious security incidents is some vulnerability in the implementation of the serialization-deserialization process. Just recently, such vulnerability was fixed in the WordPress application. Although these vulnerabilities can be extremely harmful, they seem to be less widely understood than the ones that involve direct user input. Therefore, this column is dedicated to taking a deeper look at them.

SpectorSoft, a provider of employee monitoring solutions, today announced the launch of Spector 360 Recon, a new solution designed to detect insider threats and provide warnings to organizations when policy violations, fraud, data theft, and illegal and inappropriate activities could be occurring.

According to the results of a survey conducted by Silicon Valley Bank, the majority of technology and healthcare companies view cyber security as a serious threat to both their data and business continuity, and just over one-third are completely confident in the security of their information in a survey of more than 200 technology company executives.