SecurityWeek

Oracle today announced Oracle Enterprise Gateway, a component of Oracle Fusion Middleware 11g that secures, accelerates, integrates and routes XML, Web Services and other types of data to help lower integration costs and reduce deployment risks.

Few would doubt that insiders – those allowed access to certain IT resources within your organization – have the potential to wreak considerable damage. That's true whether they're scheming to physically damage IT systems, destroy the data held within them, or steal customer or corporate data to sell to criminals or competitors.

EMC today announced that it has acquired Virginia-based NetWitness Corporation, a privately-held provider of network security analysis solutions.

Major Breach at Epsilon, the World's Largest Permission Based Email Marketing Services Company, Affects Wide Range of Major Brands - List Continues to Grow

Epsilon Data Breach Update: Other Epsilon customers affected by the breach include JPMorgan Chase, Capital One, Marriott Rewards,  McKinsey's online publication, McKinsey Quartery, specialty apparel chain New York & Company, Inc. and TiVo.

A report released this week coming from the largest association of data center professionals has suggested that with budget constraints and a tough economy, data center operators have been focused on immediate needs and paying less attention to disaster recovery planning and protecting against cyber attacks.

Bank of America announced this week that is has hired Patrick Gorman as chief information security officer and be responsible for the bank's information security strategy, policy and program.

Go ahead and click on the Viagra emails you’ve been warned about. Hackers don’t need to appeal to your libido to break into the company computer system. They have other compelling ways. These days they’ve been hanging around inside the network, building up profiles on company employees. By the time they have enough information and let loose their malware, you won’t even know that you were an unwilling accomplice in an advanced persistent threat.

A major milestone for DNSSEC has been reached today, as this morning DNSSEC was officially signed for the .Com TLD. Following several other Top Level Domains already supporting DNSSEC, the added level of security can now be enabled for the more than 90 million .Com names which have been registered according to VeriSign, the operator of .com.

Aggressive initiatives by the makers of popular Web browsers including Google, Microsoft, and Mozilla to improve the security of their Web browsers appear to be paying off.According to the Q3-Q4 Web Application Security Trends Report released today by Web application security firm Cenzic, the big Web browser companies seem to be paying very close attention to security, with many proactively seeking vulnerabilities by offering rewards or “bounties,” and seem to be efficient at fixing vulnerabilities in a timely manner.

Trustwave today announced updates and enhancements to ModSecurity, the open source web application firewall (WAF) engine for Apache, developed and managed by Trustwave's security team.ModSecurity enforces security policies to web transactions, reducing the risk of a web-based attack. As an open source technology, users and developers have been contributing to the community to help maintain the open source project that defends web applications.

Microsoft released its first ever Security Development Lifecycle (SDL) Progress Report today, outlining nine years of progress developing, improving and adopting the SDL process.

A laptop computer belonging to oil giant BP containing the private information of approximately 13,000 individuals that had filed claims following the gulf oil spill was reported lost by the company.

Reports Show Significant Drops in Spam Levels Since Rustock Botnet Takedown - But Will Rustock Be Back?The Rustock Botnet was sending as many as 13.82 Billion spam emails each day before being taken down early this month by an effort headed by Microsoft in cooperation with authorities and the legal system.According to Symantec’s March 2011 MessageLabs Intelligence Report, the Rustock botnet had been responsible for an average of 28.5% of global spam sent from all botnets in March.

DNS Migration - Strategies for Changing DNS Providers Without Disruption

eBay announced today that it has agreed to acquire ecommerce and marketing services provider GSI Commerce for $2.4 billion in cash. It’s not a “done deal” yet, however, as under the terms of the merger agreement, GSI Commerce may solicit acquisition proposals from third parties for a 40-day “go-shop” period continuing through May 6, 2011.

NEI, a Canton, Massachusetts provider of solutions for software technology developers and OEMs, today announced that it has been awarded a US Patent for a technology that creates a new type of "digital fingerprint" that accurately validates software updates for physical and virtual servers and cloud-based application platforms.Patent #7900056 filed as "digital data processing methods and apparatus for management of software installation and execution," enables secure and reliable software update distribution.

BT today launched a Managed Secure Messaging Service for financial institutions, enabling the financial community to exchange messages securely and reliably over BT private networks and the Internet.

NETGEAR today introduced the NETGEAR ProSecure UTM150 – a Unified Threat Management (UTM) gateway targeting businesses with around 150 users. The new UTM150 was designed to deliver powerful security, reliability and performance in an affordable package for smaller businesses that typically lack "big IT" resources.

VeriSign today unveiled “Verisign Uptime Bundle,” a basket of services that combines protection from Distributed Denial of Service (DDoS) attacks with Domain Name System (DNS) hosting, and threat intelligence services -- all in one solution.