SecurityWeek

In the current threat landscape, where cyber-criminals are increasingly using automation to carry out their attacks, an automatic security reaction seems to be inevitable, as mitigating attacks with a manual process would be as effective as bringing a knife to a gunfight.

SolarWinds Launches Secure File Sharing for Enterprises Through Their Secure Data Center or Private Cloud

WASHINGTON - The US government spied on electronic communications between Americans with no links to terror suspects until a judge ruled it illegal in 2011, officials acknowledged Wednesday.

The makers of the League of Legends online game have confirmed a data breach occurred affecting a portion of the company's customers in North America.

FORT MEADE - US Army Private Bradley Manning was sentenced to 35 years in jail and dishonorably discharged Wednesday for the biggest breach of official secrets in American history.

SAN FRANCISCO - Internet users have raised more than $11,000 to reward a Palestinian security researcher who hacked into Facebook chief Mark Zuckerberg's profile to expose a security flaw.

GlobalSign, a Certificate Authority (CA) focused on solutions for enterprises, today launched a new solution that integrates with Windows Active Directory and allows enterprises to automate the enrollment, provisioning and management of GlobalSign digital certificates for Windows environments.

New research from security firm FireEye is turning attention to Poison Ivy – a remote access tool (RAT) that may not make users itch, but is troublesome nonetheless.

WELLINGTON - New Zealand passed legislation Wednesday allowing its main intelligence agency to spy on residents and citizens, despite opposition from rights groups, international technology giants and the legal fraternity.

BOSTON - Rapid7 pulled the covers away from two products designed to improve an enterprise's insight into its security posture.  The products are dubbed ControlsInsight and UserInsight, and are aimed at providing deeper visibility into the security of users and endpoints.

Lockbox, a provider of a secure file sharing service, announced that it has raised $2.5 million in seed funding that the company says will be used to expand the company and increase investment in sales and marketing.

The European Network and Information Security Agency (ENISA), Europe’s cyber security agency, has released a new report outlining incidents that resulted in “major outages” at electronic communication networks or services in the EU during 2012. The report provides an aggregated analysis of the 79 reported incidents of severe outages of electronic communication networks, or services during the year.

Groklaw, a technology news site focused on legal issues, has added its name to the list of companies saying they are closing their doors due to fears about government electronic surveillance efforts.

Alert Logic, a Houston, Texas-based provider of Security-as-a-Service solutions for cloud environments, announced on Tuesday that it has agreed to be acquired by private equity firm Welsh, Carson, Anderson & Stowe. The transaction will put a majority of company shares in the hands of the private equity investors and Alert Logic’s executive management.

LONDON - The partner of the US journalist behind the Edward Snowden leaks launched legal action against Britain on Tuesday for holding him under anti-terror laws as the prime minister's office admitted it was kept informed about his detention. David Miranda, a Brazilian national who has been working with his boyfriend Glenn Greenwald on the leaks, was held for almost nine hours on Sunday as he passed through London Heathrow Airport.

We’ve all heard the longstanding piece of advice to “nip it in the bud” when confronted with something unpleasant or avoidable. But sometimes, we forget to take this same advice when it comes to data security. Focusing early on the preventative side of security before reactive measures are needed is pivotal when it comes to thwarting damaging attacks and data compromises.

LONDON - The British government forced the Guardian to destroy files or face a court battle over its publication of US security secrets leaked by Edward Snowden, the paper's editor claimed Tuesday.

Microsoft has re-issued a patch for a Windows Server vulnerability after discovering an issue that could prevent the Active Directory Federation Services (AD FS) component to stop working.

Researchers at the Georgia Institute of Technology have found a foolproof way to bypass Apple's mandatory app review and code signing mechanisms to sneak a malicious app into the iOS ecosystem.

Researchers at Zscaler warned that the attackers behind the 'CookieBomb' attack are still hard at work compromising users through legitimate websites. CookieBomb is malicious obfuscated JavaScript injected into legitimate sites with the ultimate goal of infecting users with a Trojan.