SecurityWeek

This past year or so has been a rough one for certificate authorities. From the attacks on DigiNotar and Comodo to malware such as Stuxnet and Zeus that used signed digital certificates in their assaults on vulnerable systems.

A Chinese national pleaded guilty today to one count of economic espionage to benefit a university tied to the People’s Republic of China and one count of theft of trade secrets.

McAfee Releases Endpoint Security Built on DeepSAFE Technology Co-Developed by McAfee and IntelMcAfee today announced “McAfee Deep Defender” the company’s next generation endpoint security solution that brings enhanced detection capabilities allowing it to detect kernel-mode malware.

Details Emerge on "Duqu" a Possible Precursor to the Next StuxnetSymantec researchers shared details today on what they say could be the precursor to a future Stuxnet-like attack. Symantec said they were tipped off about the threat on October 13th by a research lab “with strong international connections.”The threat has been named "Duqu" [dyü-kyü], simply because it creates files with the file name prefix “~DQ”.

The U.S.’s largest mobile carrier is alerting customers to a privacy policy change implemented last month, which enrolled all customers into a data collection program. In short, Verizon is collecting usage and location data, with plans to sell it.

Mocana, a San Francisco based company that focuses on mobile and smart device security solutions, today announced a new software solution designed to help enterprises manage and secure mobile devices and apps on their networks.The new solution, “Mobile App Protection”, or MAP, complements existing mobile device management (MDM) solutions that may be in place, but goes beyond app sandboxes, SDKs, containers, and hypervisor technologies that other mobile solutions typically utilize.

According to data coming from Lieberman Software, passwords are still a problem in the enterprise, including apathy from senior management, and password related chaos from IT staff.

On Tuesday, Rapid7 released a free version of its commercial offering to the Metasploit Framework. This new Community Edition, rests on top of the framework many security professionals have grown to love over the years, but includes the easy to use interface and some basic features from the Metasploit Pro line.

Today Oracle announced that it has entered into an agreement to acquire Endeca, a provider of unstructured data management, web commerce and business intelligence solutions.

Enterprise IT Spending to Reach $2.7 Trillion in 2012. Now Is the Time to Re-Imagine the Role of IT, Says Gartner.

- Getting The Most From Your SIEM Solution -A typical SIEM deployment conversation may look something like this: Vendor: Ms Customer, now that you’ve purchased our shiny new SIEM, complete with new SIEM smell, what use cases would you like to implement?

China telecom giant Huawei has been blocked from participating in a government bid to build a national wireless network for first responders, the reasoning given is national security concerns.According to comments made by the Commerce Department to The Daily Beast, who broke the story, Huawei “will not be taking part in the building of America’s interoperable wireless emergency network for first responders due to U.S. government national-security concerns.”

Database security and risk management vendor, Application Security Inc., has introduced updates to its product line, keeping to the company’s tradition of making database assessment and management an easily navigated and streamlined process.

Study Finds Hacking Discussions on the Rise. What do Hackers Discuss and Exchange in Online Forums?Online forums can be found for just about any topic you can imagine, and it’s no different for those looking to find information and have interactive discussions on the topic of hacking. While many underground forums are hidden and not always easily discoverable and accessible to everyone, many are wide open and easy to find, and welcome newbies looking to dive into the world of...

Following a series of outages last week that affected BlackBerry users around the word over a three day period, RIM has come forward with its plans to “make good” on the incidents that frustrated millions of users who bashed the mobile technology provider, and rightfully so.

Symantec has partnered with Armorize Technologies, a provider of Web malware detection solutions, to launch “Symantec AdVantage”, a new cloud-based anti-malvertising solution.

Analyzing Outbound and Inbound Traffic, and Network Segmentation Can Help Protect Your Network, Even After It Has Been Compromised.In my previous column I took a long look at modern malware with a focus on how to prevent malware from getting into your network in the first place. In case you missed it, you can read it here.

Everyday we Make Compromises in the Face of Privacy, and None of us Have as Much Privacy as we Want.

General Dynamics today announced that its Information Technology unit has been awarded an $86 million contract to provide information assurance and cyber security services to the Defense Intelligence Agency.Under the contract, General Dynamics will provide cyber security services to help ensure the authenticity, integrity and confidentiality of the DIA's information, and protect the agency’s enterprise-level assets, networks, security domains and data resources globally.