SecurityWeek

An Estimated 1,700 people arrived in Louisville, Kentucky on Friday for DerbyCon, a weekend filled with training, technical discussions, and fine Kentucky bourbon. This year will be the second time DerbyCon has taken place, hence the conference’s theme of “The Reunion”. If the mood from the attendees is anything to go by, things are off to a great start.

Change is the norm for most security teams, as evolving business requirements as well as new threats dictate new or modified policies and tools. But security change management is handled poorly by most organizations. In some cases, it is “just” inefficient and slow, further contributing to the security department’s reputation of interfering with the business. In other cases it is error-prone, exposing the organization to risks from changes that were executed incorrectly or even causing network outages that can damage...

As I wander the world of website security, I run across many reasons why most websites (over 70%) are open to hacks from amateur and professional hackers alike. These reasons range from poor development practices to aging websites built in a day when security was not a priority. And website security isn’t getting any better – new websites are just as insecure.

In the first big security industry IPO since Palo Alto Networks made its debut as a public company back in July, Cloud-based security and compliance solutions provider Qualys, is set to go public and start trading on the NASDAQ exchange on Friday.

Security firm Prolexic Technologies released a whitepaper today aimed at helping organizations use their firewalls more effectively to fight distributed denial-of-service (DDoS) attacks.

Hackers Breached An Adobe Server To Gain Access To Code Signing InfrastructureAdobe will be revoking a code signing certificate next week after discovering two pieces of malware that had been digitally signed with Adobe's credentials.

A new study by NSS Labs found Microsoft Internet Explorer outstripped the competition when it came to protecting users from socially-engineered malware. Google Chrome was a distant second, and performed dismally when blocking click-fraud malware, the research and testing company said.

Nominum’s New Platform Is Designed To Help Network Operators Make Their Networks Safer and More Efficient

The Red Menace Blame Game - Why China is the World's Favorite Usual Suspect in Cyber Attacks

While the world of malware creation may be mysterious to many, malicious apps that infect mobile devices are plentiful and easy to create. Because of readily available tools that enable even a novice developer to create mobile applications that fall on the dark side of the fence, users should be cautious when downloading and installing mobile apps, especially from non-official App Stores. 

Cloud Email Management Firm Will Use Funding to Support US Expansion And to Drive Innovations in Corporate Email

MANILA - Hackers angered over a new Philippine anti-cybercrime law attacked several government websites on Thursday, posting messages denouncing the new legislation.

The security vulnerability that could fully wipe Samsung Galaxy S III device appears to not be limited to just Samsung devices after all, but affects most smartphones running older versions of Android.

Security Should Fascinating, Dynamic, and Creative. Have Fun, Be Criminal In Your Thoughts, But Not Your Actions...

eIQnetworks, a Massachusetts-based provider of security and compliance solutions, has launched a new SIEM solution that the company says can be installed and fully deployed in one hour.

A company that supplies remote administration and monitoring tools to the energy sector has warned customers it was a victim of sophisticated advanced persistent threat.

For the past few years, the bring-your-own-device (BYOD) trend has been at the center of a classic IT debate pitting two common foes – productivity and security - against one another.

On Tuesday, SourceForge and the phpMyAdmin project reported that one of their mirrors was serving a compromised version of the MySQL management application. The investigation is ongoing SourceForge said, but it is believed that the nvumber of potential victims were small.

The FTC has reached a settlement with seven rent-to-own companies, and the developer of a tracking tool, which the agency said was used to violate consumer privacy. The problem stems from the tool itself, which used a “Detective Mode” to track computers that were stolen or behind on payments.

Researchers from Security Explorations, the group who pointed out that the recently released patch to address a previous vulnerability in Java was easily bypassed, said they have discovered yet another flaw.