SecurityWeek

Study Showed Over 30% of Unknown Malware Connected to New or Unknown Internet Destinations. FTP Exceptionally High-risk, Rarely Detected.

BEIJING - Researchers at one of China's top universities collaborated with a Chinese army unit accused of carrying out hacking attacks on the United States, academic papers published online show.The elite Shanghai Jiaotong University conducted network security research with People's Liberation Army (PLA) Unit 61398, the co-authored papers accessed by AFP Sunday reveal.

In the weeks since the Mandiant APT1 Report was released, the conclusions presented by Mandiant have been extensively repeated and commented on by pretty much everyone. Worryingly, the narrative was accepted almost unequivocally, brushing aside many inconsistencies and disregarding any opposing interpretations.

In an effort to increase security for user accounts, Apple on Thursday introduced a two-step verification option for Apple IDs.

Network security vendor Fortinet, on Friday said that it would acquire Coyote Point Systems, a privately-held maker of load balancers and application delivery controllers for medium and small enterprises.

Trusteer, a maker of cybercrime protection products for endpoints, has teamed with Russia-based Group-IB, a security incident response and research firm, to help financial institutions combat cybercrime, mainly in Eastern Europe where Group-IB expertise falls.

SEOUL - South Korea said Friday that an IP address identified as a source of a major cyber attack this week was not based in China as originally believed.

Researchers at AlienVault shed some light on the evolution of the Sykipot malware attacks.The Sykipot attacks have exploited a number of zero-days during the past few years, including vulnerabilities affecting Adobe Reader, Adobe Flash Player and Microsoft Internet Explorer. 

Microsoft Releases First Ever Law Enforcement Requests Report

A decade is a long time to escape detection, but that is roughly how long the TeamSpy attack may have gone on unseen.

The password hashing algorithm used in some versions of the Cisco IOS system running on its routers and switches is vulnerable to brute-force attacks, Cisco warned in an advisory.

It sounds like science fiction, but advances in technology has made it possible for computers to look at large amounts of data and make decisions based on available data.

Modulo, a provider of IT governance, risk and compliance (GRC) solutions, launched a new Vendor Risk Management solution to help enterprises identify and classify high risk vendors and cloud providers, and streamline the risk and compliance evaluation process.

If you’re in the IT industry and haven’t been hiding under a rock for the last decade, you probably got tired of hearing the phrase “the consumerization of IT”. As with most buzzwords, during the early years consumerization was touted, few organizations faced a real challenge from employee demands to use consumer devices and services – which mostly centered around using a personally owned laptop or home desktop for work purposes.

Update: South Korea says source cyber attack not based in China as originally believed.

WASHINGTON - A US-based group monitoring human rights in North Korea said Wednesday it was hit by a cyber attack that disabled its website for several hours.

While the motivation for the recent cyber-attacks against South Korean organizations remains unclear, researchers have identified the malware used as a data-wiping Trojan.

A researcher scoured the Internet and harnessed the power of 420,000 devices connected to identify 1.2 million unique unprotected devices. Devices included Webcams, routers, and printers.

On Wednesday, CrySyS Lab, the Laboratory of Cryptography and System Security at Budapest University of Technology and Economics, after being notified by the Hungarian National Security Authority (NFB), unveiled details on a near decade-long cyber espionage operation aimed at high profile targets, mainly in Eastern European countries.