SecurityWeek

White House Releases National Insider Threat Policy and Minimum Standards for Executive Branch Insider Threat Programs

Entrust introduced new services today with the goal of helping its customers solve common challenges associated with managing digital certificates. The additional services are part of the company's Entrust Discovery service, and are meant to ensure organizations can avoid application outages, enforce compliance and manage multi-source certificate environments.

The Shylock financial malware has added new evasive capabilities, Trusteer researchers have found.

Earlier this month, pro-Palestine supporters of Anonymous launched “OpIsrael”, a virtual offensive against Israel in protest of Israel’s strikes inside of Gaza. The campaign has been linked to nearly a thousand website defacements, and numerous DDoS attacks, forcing Israel to fight a two front war. 

Security testing firm NSS Labs has released the latest results from its web browser security comparative series, which this time evaluated the effectiveness of phishing protection from the most popular Web browsers – Apple’s Safari, Google Chrome, Microsoft Internet Explorer, and Mozilla’s Firefox.

On Tuesday, for unknown reasons at the time, Google suddenly started re-verifying people to previous levels of access. As it turns out, the reason was that Google's Webmaster Tools platform was impacted by a glitch that gave access to users who previously had access to the services, but had since had that access revoked. Only a small percentage of accounts were said to have seen the random re-verifications.

While attackers can break into networks using complex techniques, the reality is that most data breaches occur when attackers manage to get their hands on login credentials to administrator and other super-user accounts.

Early Wednesday, unknown adversaries diverted traffic intended for the Romanian sites of Google and Yahoo to a defaced Web page.

Printers manufactured by Samsung, and sold via Dell or direct channels, are vulnerable to attack thanks to a hard-coded administrator account in the device’s firmware. The company says that devices made after Oct. 31 are not vulnerable, but it will take time before a patch tool is released.

Last week, South Carolina’s (SC) Governor presented the results of the investigation over the exposure of the personal data of nearly 4 million individual filers and 700,000 businesses

The International Atomic Energy Agency (IAEA) reportedly is taking steps to secure its information after data was stolen from one of its former servers and posted online. According to the IAEA, the stolen data includes email addresses for some experts working with the agency. The data was posted online by a group going by the name Parastoo, which in Farsi translates to "swallow."

An exploit for a Java zero-day is on sale for "five digits" in an underground forum, according to a recent report.

WASHINGTON - Facebook has run into a fresh attack from privacy activists after the huge social network modified policies on how it manages users' data. The changes unveiled last week ended Facebook's effort to allow users to vote on privacy policy, but also permits sharing of information with its newly acquired photo-sharing service, Instagram.

It’s no surprise that due to the nature of data held by financial institutions, they are constantly under cyber-attack as attackers look to steal everything from credit card numbers to sensitive personal information that can be used for Identity theft and other forms of financial fraud. With these constant attacks and an increasingly complex threat landscape, financial organizations are scrambling to lock down networks and sensitive data as quickly and effectively as possible.

There’s No One Size Fits All Disaster Survival Plan: Every Incident Requires A Situationally Appropriate Response...

Cloud Encryption and Key Management Solution Encrypts Data Across Private, Hybrid and Public Cloud Environments HighCloud Security, a provider of cloud encryption and key management software, today released version 2.0 of its cloud encryption and key management software for virtual machines (VMs).

SAN FRANCISCO - Facebook is telling its users to ignore rumors spreading on the social network that they need to post a statement to protect their copyrights of their comments and other materials. "There is a rumor circulating that Facebook is making a change related to ownership of users' information or the content they post to the site," Facebook said in a "fact check" notice on its website Monday.

According to a recent study performed by B2B International on behalf of Kaspersky Lab, approximately 50 percent of organizations globally (even more in the U.S.), don’t take effective measures against the most pressing threats that exist today.

In order to combat e-commerce fraud and related crimes, Visa announced on Monday that it would be adding risk-based analysis to its information products line. The new layer of defense will support the Three Domain (3-D) secure program, which includes Verified by Visa, and is available now.

On Friday, reporter Brian Krebs published a report on a different kind of post-holiday sale, one where a seller is looking to make a quick buck and expose millions of email accounts to compromise. According to Krebs, an Egyptian hacker is selling access to Cross-Site Scripting (XSS) vulnerability in Yahoo for the sum of $700 USD.