SecurityWeek

A Vermont-based security start-up, Pwnie Express, will be in Vegas this week showcasing their hardware during Black Hat and Def Con. For those unfamiliar with the company, they produce some of the most innovative penetration testing tools on the market.

Kaspersky Lab, the Russian Internet security software maker behind highly rated consumer security software for PCs, on Monday announced Kaspersky Security for Mac, the Company’s new security suite designed to protect Mac OS X based systems. The company says its latest Mac security offering combines real-time scanning, proactive detection and cloud-based threat intelligence to help protect Mac OS X users.

Survey Shows That 40 Percent of Adults Consumers Don’t Always Update Software When Initially Prompted To A trio comprised of Skype, Symantec and TomTom today publicized the kickoff of “International Technology Upgrade Week” (ITUW), an initiative designed to encourage consumers to download software updates to their computers and electronic devices more often.

MapleSoft, a company that develops modeling and educational software, is warning customers to avoid emails alleging to have come from the company, due to the fact they contain a malicious attachment. The malicious emails started arriving shortly after MapleSoft suffered a data breach last Tuesday.

Stonesoft released a new, free tool today to help organizations test their network security.

Bank of America today said that it is rolling out chip technology on many of its consumer credit cards.

Apple has said they’ve fixed a business logic flaw that allowed consumers to bypass In-App Purchasing (IAP) on iOS. In a developer note, Apple calls the bypass a vulnerability and offers application developers guidance on addressing the issue.

The More We Understand About How the Bad Guys Operate, The Better off We Will Be...

Internet security software maker AVG Technologies, on Friday said that it has moved its United States headquarters to San Francisco, California. Previously, the Netherlands-based company maintained its U.S. headquarters in Chemlsford, Massachusetts, just outside of Boston.

In late May, ICS-CERT published a security guide for organizations responsible for maintaining the nation’s critical infrastructure. The guide focuses on intrusion detection and mitigation strategies, but on Thursday it was updated to include additional information.

A telecommunications company in California, believed to be Credo – a company that resells wireless spectrum – is being sued after they challenged one of the FBI’s ultra-secret National Security Letters (NSL) and its accompanying gag order.

As an interesting follow up to a recent columm by Alan Wlasuk on on Cyber Extortion last week, comes this recent news out of Maine. John Bryan Villegas, 21, of Kittery, Maine, was arrested Tuesday and appeared in federal court in New Hampshire. Villegas is charged with one count of engaging in computer intrusion involving extortion and one count of making extortionate interstate threats.

On Thursday, the U.S, Department of Justice announced the arrest of Dmitry Olegovich Zubakha, 25, of Moscow. Zubakha was arrested in Cyprus on an international warrant, issued after he was indicted last year for a series of DDoS attacks against three of the Web’s largest online retailers.

How many times have you seen a vendor site or proposal say that someone supports “best of breed” security, or that a company honors “best practice”?I see it all the time, and most of the time it makes me question the integrity and wisdom of the organization.

Palo Alto Networks IPO Prices Above Range, Company Rasies $260 Million at $2.8 Billion Valuation

Approximately 14 percent of home networks were infected with malware from April through June 2012, according to a recent report from Kindsight Security Labs, a majority-owned subsidiary of Alcatel-Lucent.

Last month, a spotlight was put on a MySQL authentication bypass vulnerability that gave hackers a one out of 256 chance to gain access to the database regardless of whether or not they entered the wrong password. Versions of MariaDB were also affected by the bug, which Rapid7's HD Moore at the time called "tragically comedic." However, application firm Coverity said the situation also presents a learning opportunity for developers.

A researcher specializing in smart grids has released an open-source tool designed to assess the security of smart meters.

Apple Pulls Bitdefender's 'Clueful' Privacy App From The App Store