SecurityWeek

In a report provided to NBC News by Keynote Systems, the banking industry is setting records of the wrong sort, more than doubling their downtime metrics from this time last year. At the same time it isn’t really their fault, each of the banks covered by Keynote’s report are targets of Izz ad-Din al-Qassam, an Iranian group behind a series of DDoS campaigns over the last seven months.

Yahoo! Japan and Goo, both major online portals, have reported breaches this week. The incidents happened on Tuesday and Wednesday, but there isn’t a clear link between the two, aside from the fact that the attackers were after account information.

Russian authorities claim to have the mastermind behind the Carberp banking Trojan and other members of the criminal gang in custody.

Microsoft is planning to release nine security bulletins this month as part of its Patch Tuesday release.

Lack of formal documentation, event monitoring, and permissions and privileges control, remain common among industrial control system environments, according to the Department of Homeland Security.

Bitcoin exchange Mt.Gox added its name to the list of organizations stung by distributed denial-of-service attacks in recent weeks.

A spear phishing campaign targeted 11 energy sector organizations using publicly available information, according to the Department of Homeland Security.

WASHINGTON - Sales of traditional desktop and mobile personal computers are expected to drop 7.6 percent this year as consumers shift to tablets and other devices, a market tracker said Thursday.

Retrospective Security Serves as a 'Mirror’ and Enables a New Level of Security Effectiveness...

SEOUL - Activist hackers appeared Thursday to have infiltrated North Korea's official news website and its accompanying Twitter and Flickr feeds, posting unflattering images of leader Kim Jong-Un. The China-based website of Uriminzokkiri, which distributes news and propaganda from the North's state media, was inaccessible and its companion feeds attacked and defaced.

While Raj Samani and I were conducting researching for our recent book, “Applied Cyber Security for the Smart Grid,” there was a lot of interest, speculation, imagination and debate around a particular discovery.

Malicious SSHD Backdoor Allows Remote Attackers to Upload and Configure Malicious Apache Modules on Web ServersAn estimated 20,000 legitimate Websites running Apache's Web server software have been infected by the "Darkleech" malware in the past few weeks alone, according to Cisco.

In response to recent criticism that the new system of generic top-level-domains (gTLDs) was being rolled out too quickly, the Internet Corporation for Assigned Names and Numbers (ICANN) selected three emergency back-end registry operators (EBROs).

While many organizations have bashed the Chinese military and Government over suspected cyber espionage attacks, Boston-based Trusteer, a provider of cybercrime protection solutions for endpoints, is embracing business opportunities in the nation, and on Wednesday announced that it has setup a sales and service office in Beijing.

RSA Sells Knowledge Based Authentication Technology to LexisNexis in Order to Focus on 'Intelligence-driven Security' Leveraging Big Data and Real-Time Analytics

Dataguise, a provider of data security intelligence and protection solutions, this week announced DG for Hadoop v4.3, a solution that provides masking and selective encryption for sensitive data in major Hadoop distributions.

The Risks Are Not Worth the Reward

ICS-CERT has issued a warning this week after vulnerability details concerning Mitsubishi’s MX Component started to gain attention online. The MX Component is an Active X control library that supports all communication paths from the PC to the PLC. Last month, a researcher released Proof-of-Concept code that would enable an attacker to open a shell on port 5500.

New Report Shows Advanced Cyber Attacks Occur Up To Once Every Three MinutesThree minutes – that's all it takes.