SecurityWeek

SEC Looking to Protect Investors and Boost Breach DisclosureOn Thursday, the U.S. Securities and Exchange Commission’s Corporation Finance division released guidance to publically traded companies on cybersecurity incident disclosure. The goal is to inform investors of risk, and release more information when filing with the SEC.

Data breaches can be costly to a company’s bottom line and reputation. Organizations should be motivated to protect sensitive data with encryption.

Hacking Electronic Voting Machines via Man-in-the-Middle Attacks

Air Force officials revealed more details about a malware infection that impacted systems at the Creech Air Force Base in Nevada. The malware attack received media attention last week when Wired.com reported malware had infected the cockpits of fighter drones used by the Air Force. Citing sources on the base, Wired reported that the malware was first discovered in September and had resisted attempts to clean computer systems.

Fake Netflix App for Android Looks to Steal Personal Information from Netflix Customers.On Demand Webcast: Protecting Corporate Data in Mobile Apps

Walking the tightrope between data security and the desire for maximum performance is a high-wire act well known to organizations that rely on the critical information contained within their databases. Their search for the right mix now prompts them to find the best way to identify users tapping into sensitive databases, while minimizing any impact on performance. Anonymity—there are times when it is not only desirable but vital.

Network Segmentation can be Complex, but the Basics are Simple. So what's the best way to Implement Network Segmentation?

Akamai Technologies, the Cambridge, Massachusetts based company that at any point delivers between 15-30% of all global Web traffic, today introduced two new solutions designed to address the increasingly complex challenges of doing business online– Akamai DDoS Defender and Akamai Compliance Management Modules.

Hackers are well aware that holes exists in the security of the Internet’s infrastructure. It’s time for the industry to protect the DNS layer.

Stuxnet Showed that Control Systems are Strategic Targets of Larger Powers and That the Consequences can be Extremely Critical.

On Wednesday, SIEM vendor LogRhythm announced the latest release of its SIEM-focused security intelligence platform, LogRhythm 6.0. The release is a step forward, and includes pattern recognition and responsive monitoring, which can act on its own if warranted. In addition, baseline changes offer faster indexing and processing of logs, as well as increased storage capacity.

On Tuesday, in addition to the monthly "Patch Tuesday" security updates for Windows and Office platforms, Microsoft released the eleventh volume of its Security Intelligence Report.

Speaking in London during the RSA Conference Europe, RSA's executive chairman, Art Coviello, and president, Thomas Heiser, addressed the breach that rocked the security world, and left egg on the company’s face.

On Tuesday, Philip Reitinger, Sony’s newly appointed SVP & CISO, announced that Sony was the victim of yet another cyber attack. In this latest incident, Sony detected an attack that tested a massive set of sign-in IDs and passwords against its network database.

A service outage at Research in Motion spanning the past two days has left millions of BlackBerry users in certain parts of the world without the ability to send or receive emails, and in some cases browse the Web from their mobile devices.After a response Monday that offered no information as to the reasons behind the outage, today RIM shared some information on the incident that disrupted service to BlackBerry users across Europe, the Middle East, Africa, India, Brazil, Chile...

Zenprise, Inc., a provider of enterprise mobile management and security software, today said that it has secured a $30 million round of financing led by prominent Silicon Valley venture capital firm Greylock Partners.The cash injection will be used to support Zenprise’s growth and accelerate its product development, sales and marketing efforts, the company said.

Microsoft released fixes for 23 security vulnerabilities today as part of this month’s Patch Tuesday. The patches are tucked away in eight security bulletins, two of which are rated “critical.” The two critical bulletins address vulnerabilities in Internet Explorer (MS11-081) as well as .NET Framework and Silverlight (MS11-078).

Much has been written about the growth of malware targeting Android devices. Earlier this year for example, Damballa found that in the first half of 2011, the number of Android devices engaged in live communication with a botnet command and control server hit 40,000 at one point.

New information from F-Secure shows that the German government appears to have paid €2 million Euros for the Federal Trojan, which the CCC analyzed and publicly reported on last weekend. In addition, several German states have confirmed the software’s usage, according to local media.