Hi, what are you looking for?
Patch Tuesday has arrived with a bevy of patches from Microsoft starring alongside patches from Adobe Systems.On Microsoft’s end, the company issued five security bulletins to plug a total of 15 vulnerabilities. Details of the bulletins were inadvertently made public briefly last week. All of the bulletins are rated ‘Important’, and none carry an exploitability rating higher than ‘2.’
Starting in January 2012, ICANN -- whose role is to oversee the huge and complex interconnected network of unique identifiers that allow computers on the Internet to find one another, including the Domain Name System (DNS) -- will allow applications from any company, city or organization in the world to manage their own generic top-level domain (gTLD). This new gTLD program will enable an unprecedented level of competition, and potential innovation, in the domain name market. But will this expansion...
The European Network and Information Security Agency (ENISA), Europe’s cyber security agency, published a new report this week that focuses on App-Store Security. The report, “Appstore security: 5 lines of defence against malware,” was published in response to the increasing number of attacks targeting mobile devices via app-stores.
Dome9 Security announced the availability of its new multi-platform security management service aimed at automating cloud server security.
Symantec today announced Symantec Certificate Intelligence Center, a cloud-based service for enterprises with large numbers of certificates used for business authentication and data encryption on servers.The solution, powered by VeriSign, discovers, centralizes, and provides reports to help enable organizations to proactively manage certificates from any Certificate Authority (CA). For the first time, enterprises have total visibility and control over their certificates, enabling them to reduce risk, costs and operational inefficiencies.
If Patch Tuesday is a party, this would be the IT security version of pre-gaming.On Aug. 9, Microsoft accidentally released information on the five security updates it is planning to release tomorrow as part of this month’s Patch Tuesday. The information, which has since been taken down, represents a rare procedural slip-up in the company’s Patch process. Normally, Microsoft publishes an advanced notification the Thursday before Patch Tuesday – the second Tuesday of every month – and then posts no...
Oculis Labs, a developer of data privacy software that protects mobile and desktop computers from visual eavesdroppers, today announced a partnership agreement with In-Q-Tel (IQT), the not-for-profit, venture capital arm of the CIA. The company said In-Q-Tel’s relationship and investment would help it accelerate Oculis Labs’ success in both government and commercial markets.
GlobalSign Acknowledges Breach of Web Server - Investigation ContinuesGlobalSign, one of the longest established Certification Authorities (CA), acknowledged late Friday that it found evidence of a breach to a web server hosting its Web site.
Apple has released an update to address compromised certificates from DigiNotar, more than a week after news of the attack first broke.
Security Researchers Stole 120,000 e-mails and 20 GB of Corporate Data From Fortune 500 Companies via Typosquatting.
Watching Anonymous in action is far better than most of the programming on television. Anonymous seems to be in a never-ending battle against the “evils” that surround mere mortals. Recent past battles have been waged against PayPal, Master Card, Visa and the Church of Scientology. Now Facebook appears to be squarely in Anonymous’ sights.
Verisign CFO Brian Robins Leaving Company to Pursue New Opportunities
Microsoft has a relatively light Patch Tuesday planned for next week with no critical patches.According to the company’s pre-patch advisory, Microsoft plans to release five security updates rated ‘Important.’ The bulletins cover issues in Windows, Microsoft Office and Microsoft Server Software such as SharePoint Server and Office Groove Data Bridge Server.
Statistics show an increase in Android devices infected with crimeware that is actively communicating with multiple criminal C&C servers Google Android devices are being caught in a Web of botnet activity at an unprecedented rate, according to new research by security firm Damballa.
On Wednesday, GlobalSign said that it has tapped Fox-IT, the Dutch cybersecurity team hired to investigate the recent compromise of Dutch Certificate Authority (CA) DigiNotar, to assist with investigations of a claimed breach by an individual that seems to be a serial CA hacker.
IronKey Introduces Trusted Access Platform and Downloadable Secure Browser to Reduce Online Banking RiskIronKey this week introduced a new platform along with a secure browser application, that when used in combination, can protect online banking users from being victimized—even when their systems are infected with some of the nastiest financial malware in existence.
Trusteer today unveiled four product updates designed to anchor its Cybercrime Prevention Architecture.The product updates cover a lot of ground, from technology aimed at blocking browser exploits to fingerprinting machines used by cyber-criminals that attempt to access protected Web applications. The company is also making a play for mobile device security with capabilities aimed at protecting the latest Apple iOS and Google Android devices from financial malware.
In my previous column I presented five commonly used weapons in arsenals of security researchers. This week, we complete the list with a mix of tools and tool types ranging from the old to the new, including tools unveiled for the first time at the recent Black Hat conference. So once again, without further ado, here are some of the tools researchers keep in their security toolbox:
As more and more digital technology is introduced into automobiles, the threat of malicious software and hardware manipulation increases. ISec Partners’ researchers got a lot of attention at Black Hat this year when they demonstrated how to start a car’s engine via text message. As it turns out, that was just the latest of several examples of how attackers can turn the electrical systems in your car into their own personal lock pick.
The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
A total of 22 patches were releaased, a majority for code execution, privilege escalation, and information disclosure vulnerabilities.
The Daybreak initiative will provide subsidized AI cyber capabilities, training and technical assistance, though OpenAI has disclosed few details about costs and eligibility.
