SecurityWeek

WASHINGTON - US regulators unveiled new rules Wednesday aimed at strengthening online privacy protection for children, to reflect the growing use of mobile apps and social networks. The Federal Trade Commission said its updated rules require online services to get consent from parents if they are aimed at children under 13 or know that they are collecting personal information from young children.

Attackers could exploit three Adobe Shockwave flaws to remotely execute code on vulnerable systems, according to three advisories published by US-CERT this week.

The popular Twitter account used to spread hacktivist related news appears to have been suspended by Twitter on Wednesday afternoon, due to violating Twitter’s Terms and Conditions.

Company: Beyond Security  |  Who: Aviram Jenik, CEO

By Using a True Security Zone, Defenders Can Take Initiative Away From the Enemy and Shift the Success of Close Battle in Their Favor.

Last month SecurityWeek reported about the discovery of a malicious module on Linux that was injecting malicious iFrames into websites. This week, researchers from ESET said they have discovered another Linux-based malware variant, one with links to the Sweet Orange exploit kit.

There was a time when if an up and coming criminal wanted to start earning money as a botmaster, the process was time consuming and expensive. According to researchers at Symantec, that isn’t the case these days, as crime kits are getting easier to obtain.

Let He Who is Free of Vulnerabilities Cast the First Exploit.

Voltage Security announced a new tokenization technology to secure sensitive data in a way that reduces the risk of a data breach while still complying with storing the information on disk.

Dell on Tuesday said that it has agreed to acquire Credant Technologies, an Addison, Texas-based provider of data protection solutions, to add security for endpoints, servers, storage and the cloud to its growing security portfolio.

Carberp, a banking fraud Trojan, now has a variant that targets Android devices, researchers have found. Carberp-in-the-mobile, or “Citmo”, is primarily targeting Russian banks and financial institutions in Russian-speaking countries, according to Kaspersky Lab. Citmo joins the ranks of Zeus-in-the-mobile (Zitmos) and SpyEye-in-the-mobile (Spitmos) in targeting SMS messages sent by banks to authenticate online banking transactions.

SAN FRANCISCO - Instagram backed down Tuesday from a planned policy change that appeared to clear the way for the mobile photo sharing service to sell pictures without compensation, after users cried foul. "The language we proposed also raised questions about whether your photos can be part of an advertisement," Instagram co-founder Kevin Systrom said in a blog post.

Oracle has moved to enhance security in an updated version of the Java Development Kit.

WASHINGTON - US regulators Tuesday ordered data brokers to turn over information about how they collect and use information about consumers, in a move hailed by Internet privacy activists.

The Department of Energy (DoE) still lacks a department-wide cyber-security incident management system, five years after auditors flagged problems in how the department manages cyber-security incidents.

Anti-Spam vendor Cloudmark recently spotted something new in the world of mobile threats: an Android-based SMS botnet. While the company describes the effort and overall operation of the botnet as primitive, the concern is that this is only the beginning.

RSA today announced expansions to its anti-fraud monitoring and protection grid, with the news that it has opened an Anti Fraud Command Center (AFCC) in West Lafayette, Indiana. The new center is part of a long-standing partnership between RSA and Purdue University.

Antivirus software maker Bitdefender today said that its security software would be integrated into mobile forensic solutions made by Cellebrite, enabling police, military and corporate security professionals to detect malware during mobile forensics examinations.

I use mobile devices every day. I have a smart phone. My household also has four laptops, an iPad and a Kindle Fire. Most professionals I know have at least a smart phone, and many have additional devices. Mobile devices are everywhere.

The Dynamic Nature of Virtualization Security - The need for real-time vulnerability management and risk assessment