SecurityWeek

New Security Council Will Bring Industry Experts Together To Study and Address Online Advertising Security IssuesA new Security Advisory Council specifically focused on online advertising has been formed with the goal of finding ways to combat bots and other security issues that plague the online advertising industry.

Adobe today continued its wave of security updates with a newly released security update for Adobe ColdFusion 10. The hotfix fixes a vulnerability affecting ColdFusion 10 Update 1 and above running on Windows Internet Information Services (IIS), that could result in a Denial of Service condition.

This week, and the week after, plenty of you will do some holiday shopping at the office. Cyber Monday, nothing more than a crafty way for sales and marketing people to bill extra hours, offers huge savings and an equal dose of risk. Here are some things to consider if you’re planning to partake.

On Friday, the PCI Security Standards Council published a set of guidelines for organizations looking to get a handle on risk assessment and threat identification. Specifically, the guidelines relate to section 12.1.2 of the standard, and are drafted to act as a supplement to help businesses discover vulnerabilities and other threats to payment card data.

Virtualization giant VMware released a security update last week to address a denial of service (DoS) vulnerability in ESX and ESXi, along with and update for the ESX Service Console that includes a number of security updates for open source Python packages.

The Greatest Problem With the Perception of Cyberwar is That it is a Separate Thing to Conventional Warfare. That is Just the Novelty Factor.

TBILISI - Georgia has detained 11 senior police and Tbilisi's deputy mayor for alleged cyber spying on opposition leaders, in the latest arrest of officials who served under President Mikheil Saakashvili, prosecutors said Friday. The officials are accused of using a malware to access computers of political parties opposed to Saakashvili, whose long dominant party was defeated in the October parliamentary elections by a coalition led by billionaire Bidzina Ivanishvili.

JERUSALEM - Israel admitted Sunday it has been targeted in a mass cyber-warfare campaign that has witnessed millions of attempts to hack state websites since the start of its Gaza offensive four days ago. Finance Minister Yuval Steinitz told reporters the government had been forced to wage war on "a second front" -- of cyber attacks against Israel.

LockPath, an Overland Park, Kansas-based provider of governance, risk management and compliance (GRC) solutions, this week launched version 3.0 of its Keylight platform, an update that brings improved reporting features and new content integration capabilities, as well as advanced assessment tools.

The Single Most Important Part of Dealing with a Phishing Attack is Preparing for the Attack Before it Actually Happens.

The Xtreme RAT malware, which has been at the center of several reports of cyber attacks on Israel has expanded, researchers have discovered. This news follows a recent report from Norman ASA, who reported that the attack campaign has been going on now for more than a year.

Romania-based anti-virus firm BitDefender conducted a controlled test on Windows 8, in order to determine how strong the basic defenses were, and attempted to infect the new OS with some of the most common malware on the Web. When all was said and done, Redmond’s latest creation was found to be just as vulnerable to common malware as Windows 7, despite the compensating controls being pitched by the company.

Anonymous Virtually Enters the Gaza Conflict – Maintains Pro-Palestinian Stance

The U.S. Senate has failed once again to move forward on the Cybersecurity Act, raising the question of what is next in the struggle to legislate solutions to threats in cyberspace.  

WASHINGTON - The White House said Thursday it was considering an executive order on cybersecurity after legislation on infrastructure protection failed again in the Senate.

“An ounce of prevention is worth a pound of cure.” Coined by Benjamin Franklin back in 1736, and applicable to so many aspects of life and business, the phrase even served the IT security industry well for the first quarter of a century. But today this phrase no longer rings true.

According to a report form Forrester, despite their security concerns – and perhaps because most IT managers simply have no other option – as many as one-third of enterprises are placing sensitive data into the cloud.

Researchers from the Georgia Tech Information Security Center (GTISC) and the Georgia Tech Research Institute (GTRI), released their 2013 cyber-threat forecast on Wednesday. The report examines what they think will be the most serious issues online in the next twelve months. The face of cybersecurity has changed over the last year, the report says, as attackers have aligned with national agendas, and taken aim at businesses and governments alike.

WASHINGTON - A US commission on Wednesday urged lawmakers to consider tighter rules on investment by Chinese state-owned firms, warning that they may pose economic as well as security risks. In an annual report to Congress, the US-China Economic and Security Review Commission also called for efforts to bring China into arms reduction talks due to Beijing's growing expenditure on opaque weapons programs.

BELIZE CITY - Prime Minister Dean Barrow on Wednesday urged anti-virus software pioneer John McAfee, wanted for questioning in the murder of a neighbor, to turn himself in to Belizean authorities. McAfee, 67, told CNBC television Tuesday that he was moving every four hours to avoid police who want to question him about the murder of fellow American Gregory Faull, a Florida native who was found dead at his home in a pool of blood.