SecurityWeek

As Anonymous initiated what it said will be the “largest attack ever on government and music industry sites” in response to actions taken by the Justice Department against operators of file sharing site Megaupload.com, downloads of a popular DoS attack tool have spiked

On Thursday, Rapid7 announced that a new Metasploit module, designed to target the GE D20 PLC, was ready for use. The SCADA focused addition is part of Project Basecamp, which seeks to prove the flexibility of the Metasploit framework.

I am a millionaire. Actually, I’m a multi-millionaire. Or rather I could be if I helped the honorable Mr. Nagumba get his money out of Nigeria, or helped Barbara get her money out of Brazil, or picked up my unclaimed lottery winnings, or helped another half dozen people in the last month.

Anonymous Launches #OpMegaupload, Launches Massive DDoS Attacks Against Multiple Targets in Retaliation for Action Against Megaupload.ComThe Anonymous collective moved swiftly today, in response to actions taken by the Justice Department against operators of Megaupload.com, a wildly popular file sharing and online storage service.

Security vendor McAfee issued a patch on Thursday to address a problem impacting its SaaS Total Protection service, including a bug that allows attackers to turn a computer into a relay point for spam.

Software-as-a-Service (SaaS) security and compliance solutions provider Qualys, this week launched an updated version of its FreeScan service aimed at helping small and medium businesses (SMBs) perform a scan on company web sites or publicly facing IP addresses, and letting them know where they may be at risk.

General Dynamics opened a new Cyber Intelligence and Solutions Center located in Annapolis Junction, Maryland today.The 28,000 square foot facility will house experts working cyber threat detection and mitigation solutions.

"Any intelligent fool can make things bigger, more complex, and more violent. It takes a touch of genius -- and a lot of courage -- to move in the opposite direction." - Albert Einstein

A Chinese computer programmer was arrested by U.S. authorities in New York on Wednesday, on charges that he stole proprietary source code while working on a project at the Federal Reserve Bank of New York.

An Endpoint Protection Best Practices survey from Symantec, which was conducted last October by Applied Research, shows that organizations following best practices for protecting endpoints are doing a better job protecting critical assets and information. However, when those protections fail, it’s still a costly situation. In short, Symantec is proving that nothing is truly secure.

Klocwork, a company known for its Insight software that performs source code analysis on-the-fly, has released a new version of its flagship product that offers C/C++ developers the same tools that web application developers have been using for some time.

On Tuesday, Oracle delivered its first Critical Patch Update (CPU) of 2012, which included a total of 78 fixes across a wide range of Oracle products. The update also marked the first time the MySQL database software has been part of Oracle's CPU process.

On Tuesday Symantec acknowledged that source code for older versions of its Norton security products did in fact leak out.

The mask protecting the infamous Koobface gang appears to have been yanked down by a mix of Facebook investigators and security researchers.

Palo Alto Networks today released its semi-annual Application Usage and Risk Report, a report that digs into employee activity and the types of applications in use on corporate networks, and what it means for enterprise security.

RSA Executives Discuss the Future of the Company, Say it Added More Than 1,000 New SecurID Customers Following High Profile Breach.

Symantec announced on Monday that it has acquired LiveOffice, a provider of cloud-based email archiving, email compliance, email discovery and email continuity solutions, for approximately $115 million.Symantec says the acquisition will extend its information governance offerings to the cloud and provide customers a choice between on-premise, cloud or hybrid delivery of Symantec solutions.

Fortinet, a provider of network security solutions, today introduced three new appliances to its line of Web application firewalls designed to address the needs of businesses ranging from mid-sized organizations up through large enterprises and service providers.

Security firm Alienvault says that a new variant of the Sykipot family of malware is targeting ActivIdentity’s ActivClient, which is used by the U.S. Department of Defense as a secure means of authentication. Aside from the examination of a sample of the malware itself, it’s unknown what, if any, data the spear-phishing campaign used to launch the attack has made off with.

The back and forth between Israel and a group of Saudi hackers escalated Monday as attacks and threats continue to mount.