SecurityWeek

Change doesn’t come easy for many, but it may be time to stop and rethink your chosen path. Maybe change is exactly what your enterprise needs.

Cybercriminals in the underground economy are making serious money from stealing corporate intellectual property, which includes things such as source code, trade secrets, marketing plans, and research and development discoveries.According to the results of a study released today by McAfee and Science Applications International Corporation (SAIC), cybercriminals realize there is significant value in stealing corporate IP and the ability to that corporate information and trade secrets.

Updated with Statement from Oracle (03/28/11 1:48PM EST) Oracle issued the following statement to SecurityWeek on Monday afternoon: "Security is one of Oracle’s greatest priorities. It was recently reported that a number of sites on the MySQL.com domain may have been compromised. Oracle is currently investigating this incident to determine which systems and data may have been affected. We will continue to keep you updated."

The Android security model includes a sandbox-like environment that segregates applications and makes good use of shared memory. It also puts the user in control of the device, in part by making the user accept permissions for the installation of any widget.

Questions on Virtualization Security You Want Answered.While virtualization may not be a new topic, it’s still a hot topic. And what’s been heating up more and more is talk about virtualization security.

One of the Best ways to Secure Messaging Infrastructure is to Leverage the Power of the Corporate Directory Information Technology in the current economy is about doing more with less—efficiency and optimization are the rule in IT projects for 2011 and driving technology trends like cloud computing and virtualization initiatives. Securing the IT infrastructure is a cost that does not contribute to a firm’s competitive advantage; however, optimization is about lowering the cost for securing the IT infrastructure.

Fraudulent SSL Certificate WarningUS-CERT, Microsoft, Mozilla and other organizations have issued warnings regarding fraudulent (fake) SSL certificates being issued.According to the Comodo Group, Inc., the certificate authority responsible for issuing the fraudulent certificates, a Comodo affiliate RA was compromised on March 15th 2011, resulting in the fraudulent issue of 9 SSL certificates to sites in seven domains.

According to recent scans of than 475 merchant networks, nearly two-thirds of merchant computer systems store unencrypted payment card data. These results come from SecurityMetrics, a provider of PCI Data Security Standard security solutions, and show that these merchants are in violation of the Payment Card Industry Data Security Standard (PCI DSS), leaving them liable to fines and other penalties.

This article is the second in a series describing the hottest commodities found in underground markets. In this column we continue to explore the trending “commodities” in underground markets and how to protect from your data being exchanged in these markets.

Mountain View, CA based Passware, Inc., a provider of password cracking and decryption technology, announced this morning that its software now can harness the power of Amazon Elastic Compute Cloud– a highly scalable cloud computing platform – for accelerated password cracking, without the need to buy expensive hardware.

McAfee announced this morning that it would acquire Sentrigo, a privately held provider of database security solutions.Sentrigo offerings include database security technologies including vulnerability management, database activity monitoring, database audit, and virtual patching.The acquisition would bring together technologies allowing McAfee customers to:

Hacker Posted Video of Himself Compromising a Hospital’s Computer System on YouTubeJesse William McGraw, a former contract security guard at the North Central Medical Plaza in Dallas, who admitted hacking into the hospital’s computer systems, was recently sentenced to 110 months in Federal prison.

Using its Cyberwar Simulating Product, BreakingPoint will Provide Structured Training and War-Gaming Exercises to Prepare Cyber Warriors to Defend Critical Infrastructure

With Point of Sale Security, Simple Preventative Solutions are Often Taken for Granted and Get Lost in all of the Rhetoric

NetQin Mobile Inc., a Beijing based provider of mobile security solutions, today announced that a Beta version of NetQin Mobile Anti-virus V4.0 is now available for BlackBerry smartphones.Utilizing a Cloud-based model, NetQin's Mobile Anti-virus V4.0 Beta offers anti-virus security to BlackBerry smartphone users and includes the following features:• Protection against threats: The Anti-virus feature incorporates a cloud-based security scan to help identify and eliminates mobile malware.

Made possible by a sponsorship from Google, the University of Maryland, the alma mater of Google Co-Founder and President Sergey Brin, today announced the creation of a new cybersecurity seminar series that will feature a diverse group of speakers from industry, academia, and government, addressing a broad range of topics related to cybersecurity, including technology, policy, and economics.

Cisco today announced a new wireless platform designed to extend the corporate wireless network from the office to remote workers, incorporating existing control, management and security infrastructure.

Consumer security software giant AVG Technologies, today announced it has secured $235 million in new credit financing through a syndicate arranged by J.P Morgan and Morgan Stanley.

It appears that Canada’s Finance, Defense Research and Development departments, as well as the Treasury Board, were hacked in February by what the Canadian government is calling an “unprecedented” and “significant” cyber attack. Although confirmation is pending, the attack seems to be the work of patriot hackers, using computer servers based in China.The Canadian government admitted that if the hackers went all the way they would have accessed the financial information of private citizens.

Cloud Computing is made Feasible Through the Deployment and Interoperability of Three Platform Types: IaaS, PaaS, and SaaS.