SecurityWeek

According to a recent study from Symantec, employees who leave a job, on their own or due to being fired, tend to keep confidential information and other corporate data, and have no problems using it at their next place of employment.

The Myanmar government has rejected claims that it is responsible for efforts to hack into the email accounts of foreign and local journalists working in the country. According to reports, at least 12 reporters received messages from Google last week when they tried to access their Gmail accounts that alerted them to possible attempts by hackers to compromise their account.

According to a report from Bloomberg, President Obama could issue an executive order aimed at cybersecurity as soon as this week. Word if the pending directive comes via two former White House officials briefed on the plans, the news agency reported.

If you need a one off example this week of why internal policies are important, or why failure to adhere to them could spell trouble, look no further than Bit9. According to the application whitelisting company, it was their failure to follow organizational deployment mandates, which led to one of their code-signing certificates being hijacked by an attacker.

The recent New York Times hack was yet another high-profile attack that demonstrated the evolution towards multi-vector, sophisticated attacks. In this case, the mission of the perpetrators was very specific -- retrieving editorial information and data related to a particular story -- but it could easily have been nastier.

DHAKA - Bangladesh has formed a fast-track court to try cyber criminals after a spike in crimes involving mobile phones and social networking sites such as Facebook, an official said Thursday.

ATHENS - Cybercrime attacks are going unreported in Greece with companies either unaware of incidents or trying to sweep them under the carpet, experts told a security conference on Thursday.

WASHINGTON - A criminal inquiry was launched Friday into how a hacker appeared to breach email accounts belonging to former presidents George H.W. Bush and George W. Bush, as well as other members of their family.

It’s funny how often, as I go about my day job in network security assessment and risk management, I run into parallels with other fields. One good example comes from cosmology (although I suppose I should be careful using words like “parallel” about the people who worry about the curvature of space).

Adobe issued an update for its Flash Player on Thursday, which hardens the media player against two vulnerabilities being actively exploited. Of note, is the warning that one of the flaws is being used in drive-by attacks targeting users of both Windows and Mac OS X.

On Thursday, as part of the ritual of advance notification, Microsoft announced its plans to address 57 security vulnerabilities within Windows, Internet Explorer, and Office. Of the 12 bulletins that are addressing the fixes, five are critical while the rest are ranked as important.

SAN JUAN, PUERTO RICO – Trying to identify a vulnerability and fixing it sounds unbelievably frustrating if the person who found it doesn't offer any details. Adobe outlined some of the challenges vendors face with “partial disclosure” at a security conference that took place this week.

Radware (NASDAQ: RDWR), a provider of application delivery and security solutions, on Thursday announced that it has acquired Strangeloop Networks, a provider of Web performance acceleration solutions.

The name BlackHole looms large over the marketplace for crimeware kits, but a new player is said to have emerged with similar code and a similar name.

Microsoft and Symantec teamed up to takedown a notorious botnet tied to click fraud activity on the Web.

BRUSSELS - The European Commission on Thursday launched a new cyber-security plan, aimed at safeguarding vital information systems and bolstering the bloc's defenses against a growing criminal threat. The plan calls on member states to set up specialized agencies to ensure the security of information networks and rapid intervention units to counter any cyber attack.

The PCI Security Standards Council (PCI SSC), the standards body that oversees the Payment Card Industry Data Security Standard (PCI DSS), released the PCI DSS Cloud Computing Guidelines Information Supplement on Thursday.

If 2012 has shown us anything about the security landscape, it’s that we’ve come very far in defending against – and deterring – attacks. And we’ve also learned that while we cannot control attackers themselves, we have endless power in our preparation for, and responses to, their attacks. With all of the new security technology and services available, we have the tools we need to raise the defensibility of every layer of our security shields.

SAN JUAN, PUERTO RICO – So long as wireless carriers and phone manufacturers drag their feet on regular operating system updates, Android users will remain vulnerable to malware and other attacks, a technologist and policy analyst said Monday.

MANILA, Feb 5, 2013 (AFP) - The Philippine Supreme Court has again stopped the government from enforcing a controversial cybercrime law, officials said Tuesday, amid concern it would severely curb Internet freedoms. Justice Secretary Leila de Lima said a fresh "temporary restraining order" (TRO) issued by the Supreme Court meant the law passed last year could not take effect.