SecurityWeek

WASHINGTON - (AFP) - Software and systems giant Oracle was fined $2 million Thursday to resolve charges that its India subsidiary kept a multi-million dollar off-books slush fund.

At the 3rd Usenix Workshop of Health Security and Privacy in Bellevue, Washington, last week, researchers focused their attention on medical devices, and not all of the presentations were about new ways of breaking them.

Researchers have uncovered vulnerabilities in a popular denial of service attack kit that organizations could use to neutralize the attacks impacting their networks.

LONDON - (AFP) - When WikiLeaks founder Julian Assange walked into Ecuador's London embassy and claimed asylum, it was just the

Network Defenders Must Be Prepared to Deal with Low and Slow Attacks, Especially As Attackers Develop More Sophisticated Attack Tools...

Saudi Aramco, Saudi Arabia’s national oil company and the largest in the world, has confirmed that is has been hit by a cyber attack that resulted in malware infecting user workstations, but did not affect other parts of its network.

Update - Julian Assange has been granted asylum in Ecuador, Scroll Down for Updates.

Live video feed from outside the Ecuadorian embassy by Citizen journalists after the UK threatens to storm the embassy and arrest Wikileaks founder Julian Assange.

Cyber-criminals are increasingly crafting attacks and targeting specific employees to maximize their ill-gotten gains. Who better to target than the folks who manage lots of money?

This morning on IRC, SecurityWeek received a message pointing to a Pastebin post, where someone claiming connections to Anonymous alleges that Sony’s PlayStation Network (PSN) has been compromised yet again.

It was a commercial printing error, not hackers, that caused two companies listed on the Hong Kong Exchange to be suspended earlier this week. Confusion, and previous security concerns, led to the initial reports that hacking was involved. However, the exchange and one of the companies involved deny the reports of a security incident.

Wave Systems, a Massachusetts-based provider of security, data protection and encryption solutions, today launched a subscription-based cloud service to help enterprises simplify management of self-encrypting drives (SEDs).

Internal audit has to play a far more substantial role in information security to ensure organizations are following proper security procedures, according to the latest security whitepaper from PricewaterhouseCoopers.

NEW YORK - (AFP) - The Reuters News website has been hacked for the second time this month, with a fake report that Saudi Arabia's foreign minister prince Saud al-Faisal has died, the news agency said Wednesday."The blogging platform of the Reuters News website was hacked on Wednesday," Reuters said on its website.

Startup to Encourage Security Information Sharing Among CISOsA new information sharing framework is in town, and the former CISO of eBay is at the helm.

Adobe rolled out a set of patches on Tuesday, addressing more than 20 security issues. The patch that is being hailed as the most important, however, is one for Flash Player that has been actively exploited in order to compromise Windows-based systems.

Cloud and managed hosting provider giant Rackspace Hosting today released Rackspace Private Cloud Software, a new offering powered by OpenStack that makes it easy for organizations to deploy their own multi-node private cloud environment anywhere they choose.The company said the newly released software uses the same OpenStack compute platform that is used to run Rackspace’s own datacenters. 

CrowdRE, The Crowdsourced Reverse Engineering Platform Adds Mac and Linux Support, Groups With Sharing Controls

Defenders have to step up and employ advanced response techniques to stop attackers from taking over their IT environments, according to a Trend Micro executive.

Microsoft released nine security bulletins today addressing 26 vulnerabilities in its products. Five of the bulletins are rated 'critical', and cover issues in Windows, Internet Explorer, Microsoft SQL Server, Microsoft Exchange, Server Software and Developer Tools. From a priority standpoint, Microsoft recommended organizations deploy three critical updates first – MS12-060, MS12-052 and MS12-054.