SecurityWeek

Update: Reuters Accused of Omitting Disclosures in NASDAQ Breach Reports

DHS Downplays SCADA Breach That Destroyed Pump at Water Utility, Saying No Credible Corroborated Data at This Time

Dedicated Appliance Brings Real-Time Threat Identification, Dynamic Scoring, Recursive Assessment and Predictive Analysis NitroSecurity, the SIEM solutions provider set to be acquired by McAfee, has launched its new NitroView Advanced Correlation Engine (ACE) appliance.

Looking to enhance its Bring Your Own Device (BYOD) solutions portfolio, Aruba Networks today announced that it would acquire Avenda Systems, a provider of network security solutions that connect users and devices to corporate networks.

"Surveying today’s threats is somewhat like peering into a kaleidoscope..."On Thursday, FBI Director Robert S. Mueller laid out some of the challenges posed by terrorists, spies, and hackers to group at the Commonwealth Club of California in San Francisco.In his speech, Mueller noted that “terrorists, spies, and hackers are always thinking of new ways to harm us,” citing examples of recent cases and describing how the FBI plans to address some of these threats.

Austrian programmer and security analyst Peter Kleisnner is slated to unveil the first known bootkit for Windows 8 at the upcoming MalCon security conference in Mumbai.

The Internet Software Consortium (ISC) has issued a fix for a bug in the BIND server software that has triggered crashes at organizations across the Internet.

Live Webcast: Embracing Consumerization: Navigating Change in Enterprise Security Now Available On Demand

Plans Must be in Place to Recover Anytime the Trust Provider is Compromised

Boston-based Rapid7, a provider of vulnerability management and penetration testing solutions, today announced that it has secured $50 million in a series C round of funding.

Business Logic Attacks - Stealthly, and Often Hard to Call Illegal, These Fraudulent Attacks Can Cost Organizations Big Money 

Security and compliance solutions provider, nCircle, today launched a network security scanning service targeted to small to medium-sized businesses.Dubbed PureCloud, the solution combines features typically found in enterprise class security solutions, with a browser-based scanning service that can scan internal and external networks without requiring any investment in hardware or software.

In an effort to help users dodge mobile malware targeting the iPhones, BlackBerrys and Android devices, McAfee this week shared some tips and strategies on the subject of mobile threats. But just what are those threats, and how are attackers using them to make money?

Atlanta-based Damballa released Failsafe 5.0 this week, the latest edition of the company’s cyber threat detection and mitigation solution. Adding new cloud-based capabilities, this latest update promises to better track “Internet aware” malware and other threats.

RSA is rolling out a number of improvements to its DLP suite, designed to provide organizations with more control and improved detection when it comes to managing data loss across the network and managing connected devices, including tablets and smartphones. In addition, the enhancements offer visibility and the ability for organizations to make more educated decisions around security and governance.

Please join SecurityWeek and Mocana [This Webacast is now available on Demand] for a Webcast as Mocana shows how organizations can protect corporate data by adding fine-

A server at Virginia Commonwealth University, containing files with personal information on current and former VCU and VCU Health System faculty, staff, students and affiliates, was breached in October, during a two step attack. As a result, 176, 567 individuals may have been exposed to personal data theft.

A new survey shows firewall management is problematic enough for many organizations to cause many network security pros to cut corners and cheat on audits.

Researchers from F-Secure have observed a piece of malware carrying an unusual piece of luggage – a valid code-signing certificate belonging to the government of Malaysia.Code-signing certificates are meant to demonstrate the authenticity of a particular piece of software, making them potentially a hot commodity for people looking to dupe security mechanisms.

Huawei Acquires Symantec's Stake in Huawei Symantec Hong Kong Joint Venture China based Huawei Technologies said today that it would acquire Symantec's 49 percent stake in Huawei Symantec Technologies, the Hong Kong-based joint venture established by Huawei and Symantec in 2008 that provides IT security, storage and systems management solutions.