SecurityWeek

Vendors That Don't Test Products Before Selling Them are Doomed to be Targets of Future Research and Attacks

Flashback Mac Trojan Cloaks Itself as Adobe Flash Update, Opens Backdoor to Mac OS SystemsIt has been a busy few days in the world of Mac malware.

Defendant planned to attack the Pentagon and the Capitol using aircraft similar to “small drone airplanes” filled with explosives and guided by GPS equipment.

TRICARE Breach Potentially Puts 4.9 Million Individuals at RiskA massive data breach that could potentially affect 4.9 million individuals who received services from TRICARE, a provider of health care services to active and retired military personnel, was disclosed this week.

Avoiding Compliance, Audit and Operational Risks. Are you Gambling a Successful Audit on Key Management Processes that Fail to Measure up?

IT security talent is in high demand across government agencies and private companies, with a shortage of resources among the federal agencies that is creating a challenge in managing successful cybersecurity operations. Last year, the U.S. Cyber Command, which was scheduled to be “fully operational” by October 1st, missed its deadline, primarily due to the challenge of finding qualified personnel.

Juniper Networks today announced new enhancements to its Junos Pulse Mobile Security Suite, bringing new mobile device management and security controls, as well as an API to allow service providers and OEMs to integrate with the platform.

Along with the widely anticipated “Kindle Fire” tablet announced today, Amazon introduced a Cloud-Accelerated Web Browser that boosts the power of the tablet by using the computing power of Amazon Web Services cloud services, something Amazon is describing as a “split browser” architecture.

Dealing with the Aftermath of a Breach Is Challenging, but there are Things you Can do to Keep Things from Going from Bad to WorseBreaking into an enterprise’s digital vault is half the battle; the other part is getting away clean. If the arrest rates for hacking are any indication, that second part has become something of a science in the cyber-underground.

Despite the risk of steep fines and increased transaction fees, many businesses are still failing to maintain compliance with the Payment Card Industry Data Security Standard (PCI DSS). That’s according to a new report today from Verizon, showing that for the second year in a row, many businesses are struggling to comply with payment card security standards and putting consumers' information at risk.

Following customer outrage and privacy concerns over a policy to continue tracking drivers with GPS technology even after they have cancelled service, OnStar today said it has reversed its proposed policy changes and won’t be keeping a data connection to customers’ vehicles after the OnStar service is canceled.

Microsoft Crushes Another Botnet: "Operation b79" Neutralizes Kelihos BotnetMicrosoft today announced it has taken down the notorious Kelihos botnet, scoring yet another legal victory in the battle against the botnet business.

Industrial Defender, a provider of security and compliance solutions for automation systems, today announced new Managed Security Services for Automation Systems, targeting potential customers in critical infrastructure sectors, including utilities, chemical, water, oil and gas.

Should IT Managers be Worried that the Security of their Mobile Workforces will Depend on the Whims of Apple and Google? Friends, RIM fans, consumers: I come here to bury the PlayBook, not to praise it.

Like all computers, automobiles can be hacked and compromised. As auto manufacturers continue to rush new features to market, security cannot continue to be an afterthought.If you’ve watched Gone in Sixty Seconds or played the video game, you’ve seen how easily a car can be hotwired—especially older models. Just pry open the steering column, connect the battery wires and touch the starter wires together. Vroom!

Perimeter E-Security Offers Hosted Log Management Solution with Simple Pricing ModelLog Management, including Security Information Event Management (SIEM) is considered essential when it comes to IT best practices, and for regulated industries it’s a requirement when it comes to compliance. Log management isn’t very complex in theory, but managing increasingly complex networks, and an ever-growing number of applications and virtual servers, log management can pose a challenge for many organizations.

A malware attack targeting MySQL.com was detected today redirecting users to malicious sites hosting a notorious crimeware kit.According to researchers at Armorize, the Oracle-owned Website was compromised today but has since been cleaned up. While the attack was underway, users who visited the site were infected and redirected to a site hosting the BlackHole exploit kit.

A decision by OnStar to continue tracking drivers with the company’s GPS technology even after they have cancelled service has drawn the ire of privacy advocates.

Zscaler, a provider of cloud-based Internet security services, today released tool designed to help protect against malicious threats, scams and spam propagated on Facebook through a technique called "Likejacking."The tool, Zscaler Likejacking Prevention, comes in the form of a Web browser plug-in and is currently available for Firefox, Chrome and Safari browsers.

On Friday, the last of 27 defendants arrested in connection with a global cybercrime operation that compromised dozens of accounts and used false identities to open hundreds of bank accounts, pled guilty and now faces up to 45 years in prison.