SecurityWeek

Nissan Motor Co. has come forward with news that malicious attackers had successfully breached its networks recently, but that the company believes the hackers did not get away with what they wanted.Andy Palmer, Executive Vice President of Nissan Motor Co., did say, however, that the hackers managed to plant malware inside the organization and likely got their hands on user IDs and hashed passwords in an incident that occurred on April 13, 2012.Palmer provided the following statement on the incident:

Vormetric, a provider of encryption and key management solutions, today introduced the latest version of its encryption solution which the company says can significantly reduce the cost and application impact associated with encrypting data across the enterprise.

Symantec announced this week that it is combining the VeriSign checkmark, which it inherited as a result of its acquisition of VeriSign’s Authentication Services business in 2010, with its Norton brand to create a single seal dubbed the “Norton Secured Seal.”

Multiple Targets Hit During Cyber Attack Targeting Iranian Oil IndustryIran disconnected computer systems at a number of its oil facilities in response to a cyber attack during the weekend, according to reports.

After celebrating the one-year mark for its Web bug bounty program back in February of this year, along with the announcement that, at the time, the search giant had paid out more than $400,000 in rewards to researchers, Google how has upped the ante in hopes that security researchers will further work to find and disclose more critical vulnerabilities on its systems in hopes of making the Google world more secure.

Boulder, Colorado-based SIEM vendor LogRhythm, and Qualys, a provider of cloud-based security and compliance management solutions, today announced a partnership under which LogRhythm’s SIEM platform will be integrated with the QualysGuard Vulnerability Management platform.

The FBI is advising people to check their computers for DNSChanger malware before infected computers are essentially shut off from the Internet.

Mobile security firm, NQ Mobile, today announced that Gavin Kim has joined the company as Chief Product Officer. In the created newly position, Kim will lead the company’s product, solutions and strategic partnerships, providing new opportunities for customer and business growth in the United States and global markets.

According to new research from Bit9, 61% of IT security professionals are concerned about attacks from Anonymous or other hacktivists. The data comes from questions given to nearly 2,000 IT security experts in order to discover what keeps them awake at night.

When it Comes to DDoS Attacks, it’s Important to Remember That There Will Likely Never be a Single Silver Bullet.

Hackers Allegedly Compromised, Liquidated Brokerage Accounts in $1 Million Trading Account Hacking, Securities Fraud Scheme A Russian national living in New York has been charged with hacking into retail brokerage accounts and using his access to steal nearly a million dollars by executing sham trades.

After more than 20 years with the FBI, the nation’s top cyber cop has made a move to the private sector. Shawn Henry will join two former McAfee executives as President of CrowdStrike Services, a subsidiary of security startup CrowdStrike that will focus on helping organizations protect intellectual property and national security information.

In its latest operation dubbed "#OpBahrain", Anonymous supporters launched a series of DDoS attacks against web sites connected to the wildly popular Formula 1 Racing series. Included in the attacks were domains associated with the official F1 Web site, Formula1.com along with f1.com, both of which resolve to the IP address 195.219.144.30.

HP Awarded Contract to Enhance Assessment of Department of Defense Networks for Vulnerabilities HP today announced that the Defense Information Systems Agency (DISA) has selected HP Enterprise Services as the prime contractor for a program that will provide analytics to enable the assessment of U.S. Department of Defense (DoD) enterprise networks and connected IT systems against DoD standards, as well as any known system vulnerabilities.

The recent move by the FCC and major cell phone carriers to create a database of stolen phones is in response to the danger your smartphone is in from thieves who want to steal and then sell them for profit. What about the hackers who just want the information from your phone – and then hope you continue using it to make financial transactions?

Adding Context Around Data Can Make a Huge Difference in How you Manage and Protect Information.Why is context important? Because without context, information is not really information; it is just data. Data is just “stuff”, while information is what that stuff means.Would you like some plain language context for my point?42.

NEW YORK, NY – Bloomberg Cybersecurity Conference -- Mentioning Pearl Harbor conjures up images of death, destruction and dread, making it a popular metaphor for conveying the devastation that could be caused by a major cyber attack. But there may be a more accurate allegory from World War II – the Japanese invasion of Singapore.

How can you defend against attacks that leverage automation and are outpacing alerting mechanisms and manual-access controls?

Certificate authorities (CAs) are critical links in the chain that ensures the quality and integrity of enterprise IT security, compliance and operations. CAs issue and ensure valuable third-party trust for human-to-machine and machine-to-machine communications and authentication. However, leveraging the security benefits of trust providers like CAs doesn't relieve your organization of its management responsibilities.

SAIC Plans Cybersecurity Research And Development Center In Melbourne, Australia Science Applications International Corporation (SAIC) today announced its plans to expand its current Australian operations to include a regional cybersecurity research and development (R&D) center in Melbourne, Australia.