SecurityWeek

As expected, Oracle has issued a critical patch update containing 73 new security vulnerability fixes across hundreds of its products. Oracle also warns that due to the threat posed by a successful attack, customers should apply Critical Patch Update fixes as soon as possible.

Veracode Report Uncovers Significant Weaknesses in Security Vendor Applications. Shows Slight Decline in the Percentage of SQL Injection Errors Across All Industry Applications, While Prevalence of Cross-Site Scripting Errors Remains Unchanged

Verizon Data Breach Investigations Report Indicated Cybercriminals Shifting to Smaller, More Opportunistic Attacks; External Attacks and Hacking on the Rise

Information security commentators love to predict what the future will bring. But change is almost always gradual.

Many Voice Concern Over Database Giant’s Response to High Risk Vulnerabilities(Update 4/19 - Oracle Released The Critical Patch Update as Expected)

The European Network and Information Security Agency (ENISA), Europe’s cyber security agency, today released its final report on the first Pan-European cyber security exercise, “Cyber Europe 2010”. The exercise was conducted back in November 2010 as a way to trigger communication and collaboration between countries and as a step for strengthening Europe’s cyber defenses in the event of large-scale cyber-attacks.

Oracle has issued a critical patch update pre-release announcement saying that on Tuesday, April 19, 2011 the database giant will release will release a critical patch update containing 73 new security vulnerability fixes across hundreds of its products.

Apple released several security updates this week, addressing a number of vulnerabilities across its products ranging from Mac OS X to its Safari Web browser and iOS that runs iPhones, iPads and iPods.

Today Symantec released the 2012 beta versions of its Norton AntiVirus and Norton Internet Security products. The company says the betas improve on performance and protection and include key security enhancements, including the ability to assess the safety and stability of an application before installation.

Justin Case at AndroidPolice.Com says he has discovered a major flaw in some versions Skype for Android which could affect up to 10 million Skype for Android users.The vulnerability stems from how Skype stores data, such as your contacts, profile, instant message logs, and more. Case says that Skype mistakenly left these files completely unencrypted and with improper permissions, allowing anyone or any application to read them.

Iron Mountain today announced that Richard Reese, Chairman of the Iron Mountain Board of Directors, has been appointed Chief Executive Officer, effective immediately, replacing Bob Brennan, who is stepping down.

As the United States and other countries prepare for the transition to a smarter electrical grid, the industry focus has been on getting smart grids themselves up and running, often with little consideration for cyber security issues.

Chase Card Services, a division of JPMorgan Chase & Co., announced that it will soon issue chip-and-signature, a credit card with EMV chip technology that provides consumers with better ease-of-use and stronger security while traveling abroad. Claiming to be the first major U.S bank to do so, Chase will first unveil chip-and-signature on the JPMorgan Palladium credit card in June, a card serving customers who frequently travel abroad, and later to other Chase credit cards within the year.

Managing Risk in the Modern World - Focus on What You Can Change and Affect, and Then Deal With What Nature and the Universe Send Your Way.A Walk Through LoganI boarded a plane in Boston on a recent business trip, and my trip to and through the airport made me realize a few important facts about security, from the parking lot through screening and even with respect to the signs around the airport and what’s being carried on the television...

Following the successful takedown of the Bredolab and Rustock botnets in November 2010 and March 2011, respectively, authorities have fired shots at another botnet.The botnet, know as “Coreflood,” is believed to have been operating for nearly a decade and to have infected more than two million computers globally throughout its existence.

Developing StoryAutomattic, the parent company that operates WordPress, made an announcement this morning that it has been hacked, resulting what the company said was a low-level (root) break-in to several of their servers. The company warned that potentially anything on those servers could have been revealed to the attackers, including client source code.

General Electric today announced its plans to open an Information Security Technology Center in Glen Allen, Virginia that will house teams specializing in cyber security, as well as network design, architecture, data management, and application development.

Log Management in Different Cloud Environments can be Challenging - But Having Access to Log Data is Essential In Order to Get the Visibility You need to Optimize and Secure your Cloud Environment.

In an effort to increase the level of protection against Advanced Persistent Threats targeting the manufacturing and process industry, McAfee and Siemens have partnered together, today announcing that Siemens-Division Industry Automation is officially tested and compatible with McAfee Application Control.

New Product Family Delivers Secure, Unified Network Access and Application Control SolutionsJuniper Networks today announced availability of the Juniper Networks MAG Series Junos Pulse Gateways, designed to provide a single point of convergence for managing the secure network connectivity for the mobile workforce.