SecurityWeek

SYDNEY - The Australian Bureau of Statistics revealed Friday it has been targeted by hackers many times, as they reportedly look to access market-sensitive information before public release. According to newly declassified documents and internal incident reports obtained by The Australian Financial Review, the ABS has been the subject of numerous attacks over the past four years.

Researchers at Solutionary say attack activity originated from North Korea has jumped exponentially in recent months.

The recent increase in the number and severity of cyber attacks around the world demonstrate that we’re squarely in an era referred to as the “industrialization of hacking” which has created a faster, more effective and more efficient sector profiting from attacks to our IT infrastructure.

According to a report released by Imperva this week, threat-blocking efficiency is greatly increased with the addition of crowd-sourced threat intelligence.

Attackers are exploiting a vulnerability in a popular Website configuration tool to gain remote access to Web servers, Cisco researchers said in an advisory.

SAN FRANCISCO - A hijacked Associated Press Twitter account that rattled markets with false word of an attack on the White House put the security of social media in the crosshairs Wednesday.

(ISC)², the non-profit information security professional body responsible for overseeing CISSP, has teamed up with the Cloud Security Alliance (CSA) to offer a new professional certification for information security.

JERUSALEM - Israeli security officials at Ben Gurion airport are legally allowed to demand access to tourists' email accounts and deny them entry if they refuse, the country's top legal official said on Wednesday.

Malware and attackers are increasingly targeting privileged accounts as part of multi-stage operations where they breach networks, gather information, and exfiltrate sensitive data, according to a recent report from security firm CyberSheath.

This week in London, during the InfoSecurity Europe conference, HP released an update to its WebInspect application security tool, designed to replicate real-world attacks and improve the testing phase of QA.

When it Comes to Privacy Policies, Size Does Matter.

Seculert, a malware detection company in Israel, has released a free version of its cloud-based flagship product, which promises to protect organizations from advanced threats on their network.

A DDoS Attack of Just 2Gbps Can Knock Most Websites OfflineOrganizations hoping distributed denial of service (DDoS) attacks are no longer incidents du jour and are beginning to slow down can think again: there were more attacks in 2012 and they aren't going away, according to Neustar.

THE HAGUE - More than 10 million Dutch citizens were unable to use their official online signature to pay bills and taxes because of a cyberattack, officials said Wednesday. The national DigiD system "is no longer accessible since Tuesday evening because of a DDoS attack," the interior ministry said in a statement.

SYDNEY - A self-proclaimed leader of the LulzSec international hacking group has been arrested in Australia, police said on Wednesday, after charging him with attacking and defacing a government website. The 24-year-old IT professional, who went by the online identity "ozshock", was seized at his office in a town 76 kilometres (47 miles) north of Sydney on Tuesday.

Malware has always been a global effort, and that hasn't changed in recent years, as FireEye identified C&C servers in over 180 countries pushing out malware and communicating with infected machines.

Related Coverage: Financial Cybercime and Cyberespionage Dominate Threat Landscape, Verizon DBIR

A researcher at Rapid7 has discovered that some 114,000 misconfigured serial port servers that connect business IT and industrial control systems to the Internet are at risk of compromise.

China and DDoS attacks were the two biggest security threats that organizations had to fend off during the last quarter of 2012, Akamai Technologies said in its State of the Internet report, released Tuesday.

New SSH Risk Assessment Tool Enables Auditors and Security Teams to Collect and Report on SSH-Related Access Compliance Issues