SecurityWeek

On Tuesday, Google said that it will begin notifying an unnamed subset of users, which could equate to anywhere from thousands to millions of people daily, if it is believed they are the target of a state-sponsored attack.Google already has the systems in place to monitor for malicious activity, especially attempts by unknown third parties to monitor users via unauthorized access. Now, Google said, when there is specific intelligence (from either users or their own monitoring mechanisms) that someone is...

The EFF is warning activists in Syria to use caution when downloading documents via Skype, after a new attack blends social engineering with a malicious PDF to install a Trojan on the victim’s computer. This latest attack is just another example of such schemes, the EFF said, which started earlier this year.According to the EFF’s blog post on the matter, Syrian activists are contacted via Skype, and encouraged to download a PDF file that purports to contain plans of assistance...

Presidential hopeful Mitt Romney almost had a Sarah Palin experience, if it wasn’t for the fact that Gawker kept their hands off the leaked goods. After an AP story mentioned Romney’s Hotmail address, Gawker’s anonymous tipster used the password reset function to gain access to it, and sent the details to the news site.

Security startup Mobilisafe officially launched its new cloud-based mobile risk management solution Monday to help IT identify and eliminate the significant risks associated with the Bring-Your-Own-Device (BYOD) trend.

A recent study by Experian Data Breach Resolution says that consumers are far from pleased with the typical response from a company during the aftermath of a data breach. Consumers expect a company to protect their data fully, but when that doesn’t happen, they would also like to have the issue explained fully, instead, they feel left in the dark.

Alert Logic, a Houston, Texas based provider of Security-as-a-Service solutions, today announced that it has closed a $12.2 million round of financing led by new investors Industry Ventures and DH Capital.

Researchers at Trend Micro have discovered a malicious PowerPoint file circulating via email, which if executed, installs a backdoor on the victim’s system. The backdoor is made possible thanks to a vulnerability in Flash Player. The good news, however, is that the vulnerability itself has long since been patched, and malicious attachments are easy to avoid.

In an effort to help organizations develop mobile applications that have security baked-in from the start, IBM has announced a series of static application security testing tools for Android.There are more than 5 billion mobile devices in the world, and according to a recent IBM study, when addressing the BYOD (Bring Your Own Device) phenomenon, 55% of CIOs said that mobile security has become their top concern. It’s just not feasible to ban personal devices in the workplace.

Following drama last month that started when Adobe said it would essentially force users to pay for an upgrade to address security vulnerabilities in some of its most popular graphics applications but later changed its tune, Adobe today rele

Google Two-Factor Authentication Flaw Led to Breach at CloudFlare, Exposed Other Google Apps for Business CustomersLate last week, news broke that web security and performance startup CloudFlare was attacked, resulting in a hacker being able to successfully redirect web traffic of one of the company’s largest clients.

Flame's controlled burn through computer systems around the world may have started with command and control (C&C) domains registered as early as 2008, according to Kaspersky Lab researchers.

Microsoft has said that it would activate Do Not Track (DNT) by default in Internet Explorer 10 on Windows 8. This announcement caused a bit of a clash between Mozilla – the first to implement DNT – and advertisers.

While The Immediate Risk of "Flame" is Low, Attackers Could Adapt Its Techniques and Repackage Them Into New Malware

The group known as SwaggSec, who targeted Foxconn earlier this year, released a collection of files over the weekend, allegedly taken after they compromised China Telecom and Warner Bros.Neither firm has issued a statement on the incident, but according to statements made by SwaggSec, China Telecom attempted to address the breach by relocating their SQL database. The effort was wasted however, as they only changed the IP location.

Microsoft: Techniques Used By Flame Could Be Used By Less Sophisticated Attackers to Launch Widespread Attacks

The secretive Defense Advanced Research Projects Agency (DARPA) is launching a new effort called 'Plan X' to improve its cyber-warfare capabilities, according to the Washington Post.DARPA's mission is to develop technologies for the U.S. military in the name of national security. According to the Washington Post, the effort represents a shift in the priorities of the agency, whose past activities in cyberspace have been more focused on protecting defense department computers. In November, DARPA announced a research initiative to improve...

Earlier this week, SecurityWeek reported that the University of Nebraska was investigating a cyber attack that resulted in a security breach of an information system that houses sensitive data on students and alumni dating back to 1985 that contains personal records for students, alumni and applicants of the university’s four campuses and could affect up to 650,000 individuals.

High Profile Breaches Create a Misguided Belief That SMBs are Immune from Attacks Because They Are Small Fish in a Big Ocean.

IPv6 Security Challenges: Experts Offer Advice for Organizations Planning to Deploy IPv6, Starting with Ensuring Visibility and Control.World IPv6 Launch day is scheduled for June 6 with the goal of bringing major Internet Service Providers (ISPs) and Web companies together to jumpstart widespread adoption of IPv6.  But from a security standpoint, companies should follow an old saying: look before you leap.