SecurityWeek

In a packed, table filled room for about 300 people, Josh Corman and Jericho opened the SOURCE Boston conference on Tuesday with a keynote address on Anonymous. The stated goal of their talk was to examine what Anonymous could look like in 2020.

Security researchers from Trusteer have shared details on a recently discovered Remote Access Trojan (RAT) attack designed to steal credit card details from hotel point of sale computer systems.

Oracle issued a massive update today to patch 88 security vulnerabilities, including dozens of remote code execution issues that can be exploited without user authentication.

“ThreatCloud” Powers New Anti-Bot and Antivirus Software Blades, Bringing Security Intelligence and Protections to Security Gateways Network security firm Check Point Software Technologies, today announced the launch of a collaborative network designed to help its customers more effectively stop attacks and thwart cybercrime, as well as share attack information and threat trends.

Privacy advocates are pressing for an investigation into Google after a report by the Federal Communications Commission (FCC) failed to find evidence the search engine giant broke the law in collecting data through its Street View service.

In Public Cloud Environments, CIOs Can’t Count on Basic Firewalls and Other Mechanisms That Protect the Outer Layer of the Whole Cloud.

Researchers at Symantec recently identified 29 malicious apps in the Google Play marketplace targeting Japanese Android users.All 29 of the apps have been taken down by Google, Symantec said, but not before a wave of installations that may number as high as 300,000.

Researchers at Kaspersky Lab have found a link between an advanced persistent threat known as Luckycat and a strain of Mac malware.

AntiSec supporters, branding themselves the LulzKnights, targeted the Berrien County Sheriff's Department on Sunday. The St. Joseph, MI, law enforcement agency lost their internal emails and documents due to the incident, and they were published online. However, this breach could lead to more damage due to the number of hosted accounts that shared space with AntiSec’s victim.

Richard Perkett Joins Rapid7 to Lead Product DevelopmentBoston-based Rapid7, a provider of security risk intelligence solutions and best known for Metasploit, its penetration testing platform which the company acquired in 2009, announced that it has hired Richard Perkett as vice president of engineering.

It’s a done deal. TIBCO Software, a publicly traded (NASDAQ: TIBX) provider of infrastructure software solutions, today said that it has completed the acquisition of San Jose California-based LogLogic, a provider of and log management and security intelligence solutions.

Flashback Malware - A Detailed History of the Largest Mac OS Malware Outbreak to Date

Researchers at Trend Micro have uncovered a piece of ransomware targeting the master boot record to take control of a system.The move is a step beyond typical pieces of ransomware, which usually encrypt files or restricts user access to the infected system. In this case however, the malware copies the original MBR and overwrites it with its own malicious code.

Utah Governor Calls For Audit of All State Technology Security and Data Storage Procedures Following Medicaid Data Breach

Neustar, Inc., a provider of information, infrastructure and security solutions, today announced that it has hired Jonathan Coombes as Chief Information Security Officer.Coombes comes to Neustar from hosting firm Rackspace, where he served as Chief Security Officer and was responsible for the company’s global cybersecurity and risk management, physical security, and compliance strategies.

Veracode, a Burlington, Massachusetts-based provider of application security solutions, today announced that it has secured $30 million in funding, bringing its total funding to date to $78.5 million.

As Advanced and Targeted Attacks Continue, The Key is to Watch What is Leaving Your Organization.

Prolexic Technologies, a Hollywood, Florida-based provider of DDoS protection services, this week released its Quarterly Global DDoS Attack Report, which revealed an almost threefold increase in the number of DDoS attacks against its clients in the financial services sector during Q1 2012 compared to Q4 2011.

HP Warns That Compact Flash Cards Shipped With HP ProCurve 5400 zl Switches Could Be Infected With MalwareHP has warned of a security vulnerability associated with its ProCurve 5400 zl switches that contain compact flash cards that the company says may be infected with malware. The company warned that using one of the infected compact flash cards in question on computer could result in the system being compromised.

Brothers Used Business Logic Attack to Trigger $1.4 Million in Fraudulent Payments, Plead Guilty to Wire FraudTwo brothers who used a combination of fraudulent actions and business logic attacks against Nordstrom’s e-commerce system and defrauded the retail giant out of $1.4 million via commissions and rebates are now facing jail time.