Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Fortinet introduced a next-generation operating system this week for its family of FortiMail secure messaging appliances as part of a larger rollout of its messaging security products. In addition to the new OS, Fortinet also introduced two new messaging security platforms: FortiMail 200D – which is aimed at small to midsized businesses – and FortiMail 3000D, which is designed for carriers, service providers and large enterprises.

By now, we’re all well aware that PCI-DSS compliance is required for any business accepting online payments via credit/debit card. Even the savviest IT veterans who understand the ins and outs of the PCI equation can unknowingly be fooled by the claims hosters and software as a service (SaaS) providers make regarding technical responsibility.

According to a report by the Financial Review, the Reserve Bank of Australia (RBA) suffered a cyberattack, a series of them to be exact, designed to infiltrate sensitive information. As one would expect, the Review’s report said the malware used in the attack came from China.

China’s Foreign Minister, Yang Jiechi, says his country is calling for new rules and cooperation when it comes to Internet espionage issues. His comments were made to reporters on Saturday, during the annual session of the National People’s Congress.

 A vulnerability in a platform used to integrate different systems controlling devices such as heating and ventilation systems could allow attackers to remotely execute code and affect availability. The vulnerability, uncovered by researcher Juan Vazquez of Rapid7, rests in the Honeywell Enterprise Buildings Integrator (EBI) R310 – R410.2. The technology uses open architecture and industry standards to integrate existing building systems such as lighting, energy management and HVAC (heating, ventilation and air conditioning) controls.

Researchers at Kaspersky Lab and Crysys Lab have discovered two previously-unknown infections mechanisms for MiniDuke, the cyber-espionage malware linked to attacks across the globe.

IT security and compliance solutions firm TripWire, announced on Monday that it would acquire nCircle, a provider of information risk and security performance management solutions. According to nCircle, more than 6,500 organizations use its on premise or cloud-based services.

In the most recent Palo Alto Networks Application Usage and Threat Report (Feb 2013), some of the most interesting data found was that while Internet social networking applications are assumed by many to represent the highest volume of risks, they only represent 0.4 percent of all threat logs observed. Rather, 97 percent of all exploit logs were found in ten applications -- nine of which were internal or infrastructure applications that are integral to many business functions (i.e.

Law enforcement officials in Finland, working with the European Cybercrime Centre (EC3) at Europol, have taken down a criminal network in Asia said to be responsible for a string of fraudulent Web purchases and other transactions.

According to a report from F-Secure, malware targeting the Symbian mobile OS may die off completely this year. In their Mobile Threat Report for Q4 2012, F-Secure said there was an abrupt drop in malware targeting the handset platform, and they expect that decline to continue.

Mobile device maker BlackBerry on Thursday notified customers about four mobile applications that were removed from BlackBerry World (the company's App store) due to privacy implications.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.

Cloud Security

Artificial Intelligence

Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.