SecurityWeek

Arbor Networks has been analyzing some of the malware used to launch DDoS attacks, in order to help educate organizations on the nature of code used to create and manage the DDoS botnets.In a series of blog posts, Arbor Networks examines the operational abilities and design of the Armageddon, Khan, and PonyDOS botnets, or rather the malware that establishes them.

It isn’t often that after a data breach involving credit cards, that the public is also given a marker on the exact amount money lost by consumers as a result. Thanks to the FBI however, we now have a better understanding of what 60,000 stolen credit cards translates to financially, as this data was included in their investigation notes while working the Stratfor case.

 USCC Releases Report on Chinese Capabilities for Cyber Operations and Cyber Espionage

Microsoft has a relatively quiet Patch Tuesday planned for this month, with just six bulletins on the way for next week.

Ford Testing Firmware Update Program, Encourages Customers to Have a Unique USB for Each Ford They OwnThis month, Ford is borrowing something from the software industry: updates. With a fleet of new cars using the sophisticated infotainment system they developed with Microsoft called SYNC, Ford has the need to update those vehicles—for both features and security reasons. But how do you update the software in thousands of cars?

Kaspersky Lab Researchers Say Parts of Duqu Are Written in an Unknown Programming Language, Uses Asynchronous Commutations

Google showed a great deal of confidence ahead of the CanSecWest conference this year when it announced plans to offer up to $1 million in rewards for a successful exploit against its Chrome browser. The company even launched its own Pwnium contest.

The National Security Agency/Central Security Service officially opened its new "Georgia Cryptologic Center" this week. Celebrated with a ribbon-cutting ceremony on Monday, the new $286 million, 604,000 square foot complex will provide cryptologic professionals with the latest state-of-the-art tools to conduct signals intelligence operations, train the cryptologic workforce, and enable global communications.

After news of the FBI’s arrest of LulzSec’s leader Sabu became public, including the fact he was a cooperating witness in an ongoing criminal investigation, Panda Labs published a blog post titled “Where is the lulz now?” Not long after that post was made, AntiSec supporters attacked Panda Security, defacing more than 30 sub-domains used by the company.

I have a confession to make: Like many security professionals, I have a love-hate relationship with Governance, Risk Management and Regulatory Compliance (GRC).

Trend Micro today announced that it has hired Tom Kellermann for a newly created position in the company, U.S. Vice President of Cybersecurity.

A Hands-on, First Look at Dome9 Security’s LiteCloud Automated Cloud Security Firewall Management Service

Defending Against Insider Threats in SCADA Environments Using Context and Correlation[Read Previous Column: "SCADA Mischief Episode 1: A Picture is Worth a Thousand Worms" Before Reading This Column]

Top members alleged to be part of the hacking group LulzSec were charged today in a sweeping operation that spanned the globe.

Defending Against DDoS Attacks: Do You Have an Action Plan in Place?In my career I have been asked how to respond to a DDoS attack. What do you do? Who do you call? Ghost Busters? What are the options?

Trustwave, a provider of cloud-based compliance and information security solutions, today announced that it has signed a definitive agreement to acquire Irvine, California-based M86 Security, a provider of Web security and anti-malware solutions.

McAfee has published a paper detailing an attack on the Apple iPad to highlight the challenges facing mobile device security.

Tacoma, Washington-based IID (Internet Identity), a provider of Internet security technology and services, today said that it has seen a dramatic decrease in Fortune 500 companies and what it considers “major” U.S. federal agencies that are infected with DNSChanger malicious malware.

Electromagnetic emissions coming off your mobile device may be leaking cryptographic information, according to research by Cryptography Research, Inc (CRI).

The human element. It’s something information security professionals lose sleep over and just can’t seem to get under control. But the threat from smartphone carrying, click-happy, and “helpful” (think social engineering) employees to an organization's security posture is not new to any CISO or IT Security professional.