SecurityWeek

Earlier this month, the world’s largest oil production company, Aramco, was attacked by the Shamoon virus. On Monday, a second attack forced one of Qatar's two main LNG (Liquid Natural Gas) production and export companies offline as well. Speculation has it that Shamoon is responsible for this as well.

On Thursday, Oracle released a rare out-of-cycle patch to address recently disclosed flaws in Java 7 that put Internet users around the world at risk, a move that many experts were concerned the software giant would not make, given its poor track record for developing timely security patches.

The group behind the Nitro attacks has joined the list of those exploiting a zero-day vulnerability in Java.

WASHINGTON - (AFP) - A former civilian guard at a US consulate in China pleaded guilty Thursday to charges that he planned to sell secrets to Chinese security officials, the US Justice Department said. Bryan Underwood, a 32-year-old American who worked at the US consulate in the southeastern Chinese city of Guangzhou, pleaded guilty to "attempting to communicate national defense information to a foreign government."

It's almost as though the criminal hackers will be soon able to read your mind. And new research suggests that maybe they will be able to do so. Personal information, such as “bank cards, PIN numbers, area of living, the knowledge of the known persons,” might be inadvertently leaked through the use of brain-computer interface (BCI) devices used in high-end gaming consoles.

SolarWinds, an Austin, Texas-based software maker known for its cost effective IT management solutions, today launched SolarWinds Firewall Security Manager (FSM), a multi-vendor firewall management solution.

FORT MEADE, Maryland, Aug 30, 2012 (AFP) - US Army Private Bradley Manning will go on trial on February 4 next year over charges that he "aided the enemy" by passing a trove of classified documents to WikiLeaks, a judge said Thursday.

IT intrusion tools, sometimes known as lawful interception technologies, are a fixture in the headlines when it comes to privacy. One of the firms offering such abilities to governments and law enforcement is Gamma International, with their FinFisher suite. Researchers from The Citizen Lab have released new data that examines the mobile side of FinFisher, as well as possible locations for its use.

Secunia announced the availability of the latest version of its Corporate Software Inspector product with new features to support additional operating platforms.

San Jose, California-based Zscaler, a provider of cloud-based security solutions, today announced that it has secured a massive $38 million round of funding—money that the company wasn’t desperate to raise.

Lack of Visibility Into Virtualized Infrastructure Makes Defending It Effectively a Challenge...

Court documents obtained by SecurityWeek, from the Eastern District of Kentucky, show that Toyota has filed a lawsuit against an ex-contractor for sabotaging the company’s supplier network and downloading confidential information.

Malware Kaspersky Lab Shares Latest Findings from “Wiper” Investigation

According to IDG News, who spoke to Adam Gowdiak, the founder and CEO of Polish security firm Security Explorations, Oracle was told about the issues currently leaving Java users exposed to attack back in April. In response, US-CERT has come forward in order to urge users and IT teams to disable Java.

NEW DELHI - (AFP) - India ended its ban on bulk text messages Thursday, two weeks after imposing restrictions to halt the spread of threats and rumours that sparked an exodus of migrants fearing attack.

FORT MEADE, Maryland - (AFP) - US military lawyers said Wednesday that Bradley Manning, the soldier accused of passing a trove of secret documents to WikiLeaks, had breached security before and knew he was breaking the law.

In mid July, Seculert discovered a new cyber-espionage weapon that was targeting organizations in the Middle East. 

Enterprises Experience 643 “Advanced Malware” Infections Each WeekAccording to FireEye’s most recent threat report released today, organizations are seeing a massive increase in advanced malware that is working its way inside enterprise walls by bypassing traditional IT security defenses.

In my previous SecurityWeek column, I wrote about how information is at the heart of most U.S. bills to secure the Internet. From CISPA to CSA to SECURE IT, all of these bills have one common tactic they are looking to tap: information sharing. My colleagues and I have a more descriptive saying for exactly what this is.

The zero-day in Java that SecurityWeek reported on Monday has gotten worse, as it can be targeted from within the Blackhole Exploit Kit and Metasploit. While this means good guys can use Metasploit as a means to proactive protection, the bad guys now have a way to automate victim collection.