SecurityWeek

The Institute of Electrical and Electronics Engineers (IEEE) stored usernames and passwords for its users in a plain-text file on a publically accessible server, a Romanian computer scientist has claimed.

Network security provider Arbor Networks has teamed with Alcatel-Lucent to establish a new proof-of-concept laboratory in Singapore for communications service providers to conduct testing of technologies to fight distributed denial-of-service (DDoS) attacks.

Security researchers have found a way to use an Android device to game certain types of cards used to pay for rides on transit systems.

DUBAI - An Islamist group on Tuesday said it will carry out new cyber attacks on US banking targets, according to SITE Intelligence Group, following similar attacks last week in response to an anti-Islam film.

A sweeping digital privacy protections measure that would have required the government to get a warrant for data stored in the cloud has been delayed until after the November elections.

Some Twitter users are getting hit with a malware attack that is spreading through direct messages. The messages take a variety of forms, noted Sophos Senior Technology Consultant Graham Cluley, including one where the recipient is told something about them has been posted on Facebook. In one iteration, the message says: "your in this" and includes a link to Facebook.  

Please join SecurityWeek and Symantec TODAY at 1PM ET / 10AM PT for an informational webcast on how you can protect your company's endpoints against the latest threats.

AT&T today launched AT&T Mobile Security, a new mobile security and mobile enterprise management solution designed for businesses.

PARIS - The French government on Tuesday summoned Facebook managers to explain rumors that some users' old private messages were being posted publicly on the social network. Facebook denied the rumors that personal messages were appearing on the users' "Timelines" which can be accessed by a large Internet audience.

Businesses today cannot function at full capacity without Email. Criminals know this, and despite billions spent to protect corporate email, it’s the easiest way for an attacker to get inside a company. With that said, FireEye has published a report on the top Spear Phishing campaigns so far this year, which they say have shot up more than 50% compared to levels in 2011.

Researchers from MWR Labs unveiled a zero-day attack against a Samsung Galaxy S3 smartphone last week during EUSecWest, which leveraged the device’s Near Field Communication (NFC) connection to gain full control over it.

During the EUSecWest security conference last week in Amsterdam, researchers taking part in the Pwn2Own Mobile contest showed off a new attack vector in WebKit that can be used to snatch pictures, browsing history, and address book information from an iPhone.

Facebook Ireland has disabled their tag suggestions, a feature that uses facial recognition technology, in order to comply with Irish Data Protection law, and by extension EU privacy laws. News of the change comes in a report published by the Office of the Data Protection Commissioner in Ireland last week.

Consumerization may be one of the factors influencing enterprise IT, but for many organizations, security may not be keeping pace, according to a new paper by Forrester Research.

SAN FRANCISCO - Facebook Monday denied reports that it displayed some users' old private messages in public "timelines" at the social network. Facebook said it investigated the complaints, initially from members in France, and was satisfied there had been no breach of privacy.

Just over a year after it was initially discovered, Flashback is extinct. The death declaration comes from ESET, who has recently published a report on the malware, made famous by building the world's largest Mac OS X-based botnet.

When Defending Against Today's Threats, It's Important To Know If a Particular Security Solution Is Ready For The Front Llines of The Network.

DAMASCUS - Syria's ministry of information on Monday denied the sacking of the country's ambassador to Lebanon and said a previous email announcement was a result of hacking, state television reported. "The email account of the ministry was hacked in order to publish inaccurate information" about the reported dismissal of the Syrian Ambassador to Lebanon Ali Abdel Karim Ali, the ministry said in a statement carried by state television.

Office of Energy Infrastructure Security Will Address Cyber Attacks Risks and Physical Threats Such as Electromagnetic Pulses

WELLINGTON - New Zealand Prime Minister John Key has ordered an inquiry into government agents spying "unlawfully" while assisting police in the lead up to the arrest of Megaupload boss Kim Dotcom. Key said Monday he has told the Intelligence and Security department to investigate "the circumstances of unlawful interception of communications of certain individuals by the Government Communications Security Bureau".