SecurityWeek

In response to the rapid adoption of virtualization technology by organizations from around the globe, Kaspersky Lab today announced a solution built from the ground-up to protect evolving corporate IT infrastructures from the ever-growing threat of malware.

Late Sunday reports emerged that Microsoft’s online store in India had been hacked, defaced and user information exposed including unencrypted passwords. It turns out these claims are true and while Microsoft isn’t saying much on the subject, they did comment on the issue.

Whistleblower site Cryptome has been hacked and infected by the Blackhole exploit kit.Just how the breach occurred has not been said. Cryptome co-founder John Young however told SecurityWeek that the site is in the process of cleaning everything up, and that process should be finished by the end of the day.“It appears every HTML page was infected so we are replacing all the pages to be sure,” he said.

In November 2011, the Steam gaming platform, in addition to user forums where gaming fans gather to discuss various gaming topics, said that intruders obtained access to its Steam database in addition to the defacing the forums.

ADT Business Solutions today announced the next generation of its Anti-Skim™ ATM Security solution to help protect banks and their customers from the rising threat of ATM skimming. ADT’s new anti-skimming technology offers multilayered security to help protect ATM customers from this blend of electronic crime and cyber-fraud.Installed inside the ATM, the company says the enhanced Anti-Skim ATM Security kit features technology that works on all major ATM makes and models.

Over the weekend, Google addressed two separate security issues within Google Wallet, one which takes some skill and knowledge to exploit, and one that anyone searching the lost and found box can exploit - assuming they are aware of it.

There are Tons of Applications and Code out there that are not Overtly Malicious, yet do Spyware-like Things Without the user’s Knowledge and Reduce the Security Posture of the Client Machine. 

Google has passed the one-year mark for its Web bug bounty program, including the announcement that they have paid out more than $400,000 in rewards to researchers.Last week, Google took a nostalgic look back at the state of its bug bounty program, which was launched in November 2010. Since that time they’ve experienced some ups and downs, but the search giant remains positive about the state of things and looks forward to future growth.

One-hundred and eleven Mexican websites, some of them related to Mexico’s mining industry – others related to Mexico’s Senate and Ministry of Interior, Alabama’s state website, the UN, and even the CIA, were targeted this weekend by various supporters of Anonymous. The reasons for the attacks are as diverse as those who carried them out.

In recent SEC filings, VeriSign revealed they were repeatedly hacked during 2010. Though the company did not divulge what type of data was breached, the report raised serious concerns – particularly since VeriSign’s claim to fame was their position as a leader in the certificate issuance field.

CANCUN, MEXICO -- Kaspersky Lab Cyber Conference 2012 – Kaspersky Lab, the Russian security software company co-founded in 1997 by Eugene Kaspersky revealed some of its 2011 financial details at its Cyber Conference that took place this week in Cancun, Mexico.

From my perspective, there are two Internets. The one common folks use - you know, for surfing, stalking and finding who played first base for the NY Yankees in 1989 (Don Mattingly, of course).

Microsoft is prepping nine security bulletins to patch 21 vulnerabilities next week as part of Patch Tuesday.This month’s update features fixes for Microsoft Windows, Office, Internet Explorer and .NET/Silverlight. Four of the bulletins are rated ‘Critical.’ In particular, these bulletins affect Windows, the .NET Framework, Silverlight and Internet Explorer. The remaining bulletins are all rated ‘Important.’

Protests against Apple and Foxconn due to furor over reports about working conditions have gone digital.

Trustwave captured the public’s attention over the weekend, when its policy regarding subordinate root certificates led to the discovery that one of its customers used them to monitor their employee’s SSL communications. Reacting to the public’s ire, Trustwave explained the incident on its company blog, and promised to end the practice moving forward.

The Cloud is Very Different, but the Approach to Adoption Needs to go Back to Basics. Buyer Beware? No, buyer be Smart and Educated.

It is not surprising that customer records would be the main target for attackers. But a database of financial records from a major bank is not their most common target – instead it’s the food and beverage industry that has proved most appetizing.In its 2012 Global Security Report, Trustwave revealed that for the second year in a row, the food and beverage industry comprised nearly 44 percent of the data breach investigations in 2011. Retail businesses were the second largest...

Symantec confirmed with SecurityWeek today, that following claims from Anonymous that additional Symantec product source code would be released, the claims are true, and the said files are in fact the legitimate source code from its pcAnywhere product.

Clickjacking, a term coined by Jeremiah Grossman in 2008, is quickly becoming an extremely dangerous threat. Recent news coverage of enormous clickjacking schemes are bringing this type of threat to the forefront. The term clickjacking, for those not familiar, refers to a type of attack that’s designed to get individuals to unknowingly click on nefarious links or buttons. From there, hackers are able to garner confidential information, get users to take an action online they normally wouldn’t, or compromise their...