SecurityWeek

MOSCOW - A 30-year-old Russian man who is suspected of organizing an hour-long hack attack on the Kremlin website in support of the political opposition faces up to four years in prison, said the FSB security service which investigated the incident.

Last week, researchers discovered a Java vulnerability being widely exploited online, as it was included in several crime kits, including Blackhole and Cool Exploit. On Sunday, Oracle released a patch in order to address the issue, but some experts doubt it will help.

Microsoft has said it would release a patch this afternoon, out-of-band, that will address the recently discovered Internet Explorer vulnerability that has been used in separate targeted attacks. The security fix comes just one week after January’s monthly security release from Redmond.

Anonymous is petitioning the White House to legalize DDoS, urging them to recognize it as a legitimate means of protest. But based on the number of signatures so far, it  seems as though few people agree.

Foxit, the popular alternative to Adobe’s Reader software for PDF files, and the application often recommended as a more secure alternative, has been tagged in a recent vulnerability disclosure. Currently, there is no patch for the issue.

Nokia's Xpress Mobile Browser Decrypts HTTPS TrafficNokia earned some time in front of the InfoSec firing squad this week, after they admitted to intercepting Web traffic sent by its Xpress Mobile Web Browser. Nokia’s interception via proxy was a bit of a known secret, but has gained traction in the news due to a security researcher’s blog post earlier this week.

The Practices and Technologies Used by Public Cloud Providers Are Going to Strongly Influence How Private Datacenters are Run...

The European Union and the US agreed Friday to share more data on cross-border cybercriminals at the opening of a new hi-tech unit aimed at helping police catch up with increasingly imaginative criminals. "This agreement will reinforce the cooperation, the exchange of information," Europol chief Rob Wainwright told AFP at the opening of the European Cybercrime Centre (EC3) in The Hague.

Attackers breached two servers at a University of North Carolina cancer facility last year, potentially exposing Social Security numbers of over 3,000 individuals.

TEHRAN - Iran has denied US media reports it carried out cyber attacks on US banks, the official IRNA news agency said Friday, quoting a statement from Tehran's UN mission.

Identity Management vendor Identropy has launched its cloud-based identity service and put an emphasis on ease-of-use and deployment in its bid to take identity access management off-premise.

The number of high-risk apps in Google Android app stores jumped by 43.2 percent in the fourth quarter of 2012, with users in the U.S. having an average of 1.1 risky programs per device, according to a report by TrustGo Mobile.

FireEye, a provider of advanced threat protection solutions for enterprises, on Thursday announced that it has raised $50 million in venture funding, a massive amount that brings the total amount raised by the company to over $100 million.

New Java Vulnerability Being "Massively Exploited" in the WildAnother Java zero-day security flaw is actively being targeted in the wild, and exploits are already in use across some of the most popular crimeware toolkits.If you haven't disabled Java yet, there is no better time than now.

GRC Platform Supports Hadoop and MongoDB Big Data Frameworks to Enhance Risk and Compliance Management

The first PC viruses appeared more than 25 years ago. Little did we realize that this was just the beginning of what would become a series of threat waves.

Attackers increasingly targeted the country's critical infrastructure such as power grids, water systems, and nuclear facilities in 2012, according to a recent Homeland Security report.

The gang behind the notorious Blackhole exploit kit is branching out into new markets with a new crimeware kit and a $100,000 budget.

University researchers developed a way to encode hidden messages using the silent portions of a Skype call.

Los Alamos National Lab, one of two labs in the nation responsible for nuclear research, has replaced networking equipment out of concerns over security. The concerns stem from the fact that the networking switches were created by China-based HC3 Technologies.