SecurityWeek

Smart grids were not designed with security in mind, making the entire infrastructure highly vulnerable, McAfee said in a recent report.

The Department of Homeland Security, through its Industrial Control Systems Cyber Emergency Response Team (ICS-CERT), issued a warning last Friday about security vulnerabilities in the Tridium Niagara AX Framework, a popular software platform that integrates various control systems and devices and allows them to be managed over the Internet.The scary part? The security flaws were reported months ago, and permanent a fix has not yet been created.

Cyber-criminals are employing new tactics to circumvent the risk analytics engines used by banks to detect financial fraud, Trusteer researchers found.

Zero-day disclosures, new tools and exploits abound in this year's Black Hat conference in Las Vegas. Next week, the Caesar's Palace hotel in Las Vegas will host the 15th annual gathering of the minds in the world of security known as Black Hat USA.

Armed with an extra $22.4 million in its pocket following a Series C financing round announced just over a week ago, AlienVault, the San Mateo, California-based company behind open source SIEM, OSSIM, and the AlienVault Open Threat Exchange, today announced the latest version of its suite of security management products.

According to Webroot’s Dancho Danchev, a service targeting Russian and Ukrainian users, is offering access to compromised social networking and email accounts.

On Tuesday, Boston-based Rapid7 announced that they have introduced the means to increase vulnerability management efficiency by offering tighter integration between Nexpose and Metasploit.

Ever since the invention of the lock, someone (somewhere) has tried to defeat it, often going to extremely creative lengths to do so. Such is the case of Ray – a security researcher and law enforcement consultant from Germany– who used a 3D printer to generate copies of handcuff keys that are normally restricted to law enforcement; the Bonowi and Chubb.

CipherCloud, a provider of cloud encryption technologies, has launched a cloud encryption gateway for Office 365 that transparently encrypts all email, calendar, and contact data stored in Microsoft's cloud-based Exchange Online and third-party Hosted Exchange services.

Kaspersky Lab and Seculert revealed the presence today of a new cyber-espionage weapon known targeting users in the Middle East. 

Corero Network Security added reputation scanning and IP address blocking to its line of anti-distributed denial of service appliances.

Carnegie Mellon University (CMU), in collaboration with the CERT Program of the Software Engineering Institute (SEI), is launching a new education and certificate program designed for information security executives that will emphasize “strategic cybersecurity management”.

StrikeForce Technologies, TradeHarbor Partner on Three-Factor Authentication Using Voice Verification TechnologyStrikeForce Technologies, a provider of our-of-band authentication and security solutions, will combine voice verification software with its out-of-band authentication platform to create "three-factor" verification for customers increasingly worried about being compromised.

The benefits of using full disk encryption far outweigh the costs of deploying the product, which is more than just the cost of purchasing the software, according to a new study.

Google has expanded its use of address space layout randomization (ASLR) in Android 4.1, AKA Jelly Bean, in a bid to help thwart exploits.

Meraki, a provider of networking and security solutions, today announced that it has added wireless intrusion detection and prevention technology to its MR-series line of wireless access points.

Researchers at malware intelligence firm FireEye are reporting that Dutch authorities have pulled the plug on two secondary servers used by the Grum botnet. The removal of the servers shines light on how quickly some law enforcement agencies work, given that proof of their existence is just over a week old.

A Seattle man was sentenced on Friday to 95 months for a crime spree that was made for TV. Joshua Allen Witt, 35, pled guilty to four counts of fraud and one count of identity theft, stemming from a crime spree that lasted 30 months and involved more than 50 businesses and $3 million in stolen cash.

Skype has said they are aware of, and will patch, an odd bug that created a privacy issue by sending instant messages to a completely different party. The bug itself is buried somewhere within the massive amounts of client code, and is only triggered during a crash.The issue, according to a notice from Skype’s Leonas Sendrauskas issued on Monday, only happens when a user's Skype client crashes during an IM session. When this happens, some users may have the last...