SecurityWeek

Business leaders need to take note quickly, and learn to recognize that information security risks are real risks to their success.

Stealthy Attacks Use Trusted Enterprise Systems and Trusted Networks, Making Detection DifficultSkilled attackers are burrowing their command and control (C&C) servers inside the networks of compromised businesses in order to circumvent security measures, according to a security expert familiar with the innovative new attack method.

Symantec Threat Report Reveals 81 Percent Increase in Malicious Attacks, Drop In Number of VulnerabilitiesIn its latest threat report released on Monday, Symantec revealed that while the number of vulnerabilities fell by 20% in 2011, it saw a significant increase in the number of malicious attacks. In addition, the report notes the fact that targeted attacks are spreading to organizations of all types and sizes.

Appliance Helps Accelerate Custom BYOD Policy EnforcementEnterasys Networks, a provider of network infrastructure and security solutions, today announced a new bring-your-own device (BYOD) solution designed to help address the increasingly complex and pressing concerns with the BYOD trend, including security, user experience, simplicity and flexibility.

The Cyber Intelligence Sharing and Protection Act (CISPA) passed on Thursday with a 248-168 vote in the U.S. House of Representatives. The vote was a day early, and was held just after a number of amendments were approved. As the bill heads to the U.S. Senate, its lost notable form a high profile company and faces a veto from the Obama Administration.

Oracle recently patched a flaw in the TNS Listener service as part of their update release in April. As it turns out, the TNS Poisoning patch didn’t apply to current versions of Oracle, leaving existing customers on their own. The TNS Poison bug has quite the history, researcher Joxean Koret reported the issue in 2008, but the flaw itself has likely existed since Oracle 8i.

Microsoft has patched a recently disclosed password reset vulnerability in Hotmail, which exposed a user base of some 360 million people to having their accounts compromised. Unfortunately, says Vulnerability Laboratory, the firm that discovered the flaw initially, the patch might not have arrived soon enough.

PRAGUE, CZECH REPUBLIC – Counter eCrime Operations Summit - The results of a recent study released by the Anti-Phishing Working Group (APWG) at its Counter-eCrime Operations Summit (CeCOS VI) taking place this week in Prague, showed that PayPal has lost its spot as the most phished brand globally.

Painless PCI Assessments Are Possible If You Work For Them

VMware officials are looking to calm customer fears after word spread that source code for its ESX hypervisor product was leaked online.

Shape Security Raises $6 Million in Round Led By Kleiner Perkins Caufield & Byers and TomorrowVentures

CORE Security Technologies, a Boston, Massachusetts-based provider of security testing solutions, this week announced a significant update to its CORE Insight Enterprise security intelligence solution.According to the company, its latest offering helps security professionals identify critical exposures to their infrastructure and link them real-world business risks.

The Trustworthy Internet Movement (TIM), which officially made its debut at the RSA Conference earlier this year, today announced that it has chosen SSL governance and implementation across the Internet as the

Why Consistency of Security Effectiveness and Performance is Key When Choosing Security TechnologiesHow do you separate marketing hype from reality? One approach is with third-party tests of IT security solutions—an efficient, neutral way to validate vendor claims of solution effectiveness and performance. But it isn’t enough to just look at a point-in-time result. What really counts is consistency year after year. Here’s why.

On Wednesday, security firms Sophos, Trend Micro and Symantec announced that they have inked deals with Facebook to help the social networking giant protect its massive user base.

A new report by application security vendor Veracode paints a not-so-rosy picture of application development programs.

With the rise in complex threats and new advanced malware flooding headlines and causing a stir, it’s easy to forget about some of the sizable threats that have graced the security word over the years—threats that may be out of mind, but shouldn’t be.

Google today said it would make another change to its search engine algorithm in an effort to cut back on web sites showing up in search results that may be there because of the wrong reasons.

A recent study coming from Sophos showed that 1 in 5 Macs have malware on them, leading to headlines proclaiming that 20% of Macs are infected. This misleading claim misses a key point in Sophos’ study, which is that the 20% represented Windows-based malware infections. If anything, Sophos’ results seem to suggest that Macs are the new Typhoid Mary of the Internet.

Firm Estimates Total share of Russian Cybercrime Market Doubles to Nearly $2.3 BillionGroup-IB, a Russian cybercrime investigations and forensics company with offices in New York and Moscow, recently released a report that examines the Russian cybercrime market and its existence in 2011. The 28-page report looks at the risks, trends, and financial performance of the criminal element, and includes forecasts for the coming year.