SecurityWeek

Following the initial discovery of the Flame malware, researchers originally believed there was no significant similarity between its code and development methods and those of the Tilded platform, the development platform that Stuxnet and Duqu are based on.

McAfee today announced new enhancements to its Cloud Security Platform that bring enhanced security for cloud-based interactions through better product integration, context-based policy support and web protection for mobile workers.The McAfee Cloud Security Platform is designed to help organizations extend their security and policy enforcement into the Cloud by securing the three primary channels of traffic – email, web and identity.

Iran said on Monday that the attack on its Oil Ministry was carried out by U.S. hackers, citing the results of internal investigations.

After MyBios (Mebromi) became the first malware to successfully infect the Award BIOS and survive a reboot to own the system, BIOS-based rootkits became the toast of the malware research community. That was in 2011, and now, months after the initial discovery, McAfee has found another BIOS-based rootkit – BIOSkit.

The bot’s name is IP-Killer, also known as MP-DDoser. First documented earlier this year, IP-Killer is purely a DDoS bot, as it cannot capture passwords or deliver spam by the truckload. Active development since its inception in 2011 has turned this specialty code into what Arbor Networks calls a rapidly improving threat, including a revamped and working version of the famed Apache Killer technique.

Oracle has said that it would deliver 14 patches on Tuesday, in order to address serious security problems with the Java platform.“Due to the threat posed by a successful attack, Oracle strongly recommends that customers apply Critical Patch Update fixes as soon as possible,” an advisory states.

Qualys IPO Could Raise Nearly $100 MillionCloud-based security and compliance solutions provider Qualys, Inc., on Friday filed an S-1 registration statement with the U.S. Securities and Exchange Commission, and is set to soon to go public in an IPO that could raise nearly $100 million.

Originally released in English back in March, the 2012 Verizon Data Breach Investigations Report provides a look into some of the best data available on attack trends, and is compiled based on the analysis of more than 850 breaches, and includes data from five law enforcement agencies including the U.S.

Authors Behind Flame Attempt to Cleanup – Issue Kill Command to Infected Systems

It’s been the story of the week; someone dumps a list of more than six million passwords on a Russian forum, and teams of people start cracking them. There are clear indications that they came from LinkedIn, which the social network later confirmed. Shortly after that, dating site eHarmony says they too had accounts compromised by the leak, and now Last.fm is in the mix. Here’s a recap, and a look at the letter LinkedIn is sending to users.

According to a report from Deutsche Presse-Agentur (DPA), German armed forces confirmed the existence of a cyberwarfare unit in a document presented to parliament earlier this week. The defensive side of the military’s cyber group is well-known, but the notice to parliament marks the first time that the offensive aspect has come to light in an official report.The report to legislators from Germany’s Defence Ministry outlines the group’s objectives only briefly.

Proofpoint, a provider of Security-as-a-service solutions, on Thursday announced “Proofpoint Targeted Attack Protection”, a new cloud-based security solution designed to provide protection against spear phishing and other malicious, targeted attacks.

A 39-year-old consultant from California, Michael Garcia, has been found guilty sentenced to fifty-seven months in prison for identity theft. According to the court, Garcia committed his crimes while working as an IT contractor.Garcia was a technical contractor, who offered IT support to various firms within the Stockton area. While employed with a law firm and an accounting firm, he accessed their records and copied the personal information for more than 1,450 people.

Microsoft plans to issue fixes for 25 security vulnerabilities in its upcoming June 2012 Patch Tuesday update.

NQ Enterprise Shield Helps Protect Bring-Your-Own-Devices (BYOD) from Mobile Threats Mobile security software provider NQ Mobile this week announced the official launch of its enterprise mobile security offering, NQ Enterprise Shield.

Research from Trusteer shows that device fingerprinting, which is used in fraud detection systems, might be a useless layer of protection after they discovered a manual for bypassing such features being circulated among online criminals.

Yesterday, SecurityWeek published an early report on a story from Dangens IT that a hashed password list containing some 6.5 million records may have been leaked from LinkedIn. Throughout the morning, several people examining the list of password hashes reported discovering their own credentials in the stolen list.

Organizations Need to Understand The Security Gaps The Mobile Enterprise Presents and Embrace a Combination of Security Tools and Techniques to Bridge these Gaps.

Web performance and security firm, CloudFlare, this week announced launched new services with increased performance and features designed to address the needs of larger businesses.The two new offerings, CloudFlare Business and CloudFlare Enterprise, are built on top of the company’s infrastructure and provide services including broader DDoS Protection, WAN Optimization, content delivery, higher levels of support and more.

A hashed password list containing some 6.5 million records has been uploaded to a Russian forum earlier this week. An expert consulted for the story says that there are indications the passwords were taken from the corporate social network LinkedIn, and this has since been confirmed with LinkedEd.