SecurityWeek

BT today launched a Managed Secure Messaging Service for financial institutions, enabling the financial community to exchange messages securely and reliably over BT private networks and the Internet.

NETGEAR today introduced the NETGEAR ProSecure UTM150 – a Unified Threat Management (UTM) gateway targeting businesses with around 150 users. The new UTM150 was designed to deliver powerful security, reliability and performance in an affordable package for smaller businesses that typically lack "big IT" resources.

VeriSign today unveiled “Verisign Uptime Bundle,” a basket of services that combines protection from Distributed Denial of Service (DDoS) attacks with Domain Name System (DNS) hosting, and threat intelligence services -- all in one solution.

Change doesn’t come easy for many, but it may be time to stop and rethink your chosen path. Maybe change is exactly what your enterprise needs.

Cybercriminals in the underground economy are making serious money from stealing corporate intellectual property, which includes things such as source code, trade secrets, marketing plans, and research and development discoveries.According to the results of a study released today by McAfee and Science Applications International Corporation (SAIC), cybercriminals realize there is significant value in stealing corporate IP and the ability to that corporate information and trade secrets.

Updated with Statement from Oracle (03/28/11 1:48PM EST) Oracle issued the following statement to SecurityWeek on Monday afternoon: "Security is one of Oracle’s greatest priorities. It was recently reported that a number of sites on the MySQL.com domain may have been compromised. Oracle is currently investigating this incident to determine which systems and data may have been affected. We will continue to keep you updated."

The Android security model includes a sandbox-like environment that segregates applications and makes good use of shared memory. It also puts the user in control of the device, in part by making the user accept permissions for the installation of any widget.

Questions on Virtualization Security You Want Answered.While virtualization may not be a new topic, it’s still a hot topic. And what’s been heating up more and more is talk about virtualization security.

One of the Best ways to Secure Messaging Infrastructure is to Leverage the Power of the Corporate Directory Information Technology in the current economy is about doing more with less—efficiency and optimization are the rule in IT projects for 2011 and driving technology trends like cloud computing and virtualization initiatives. Securing the IT infrastructure is a cost that does not contribute to a firm’s competitive advantage; however, optimization is about lowering the cost for securing the IT infrastructure.

Fraudulent SSL Certificate WarningUS-CERT, Microsoft, Mozilla and other organizations have issued warnings regarding fraudulent (fake) SSL certificates being issued.According to the Comodo Group, Inc., the certificate authority responsible for issuing the fraudulent certificates, a Comodo affiliate RA was compromised on March 15th 2011, resulting in the fraudulent issue of 9 SSL certificates to sites in seven domains.

According to recent scans of than 475 merchant networks, nearly two-thirds of merchant computer systems store unencrypted payment card data. These results come from SecurityMetrics, a provider of PCI Data Security Standard security solutions, and show that these merchants are in violation of the Payment Card Industry Data Security Standard (PCI DSS), leaving them liable to fines and other penalties.

This article is the second in a series describing the hottest commodities found in underground markets. In this column we continue to explore the trending “commodities” in underground markets and how to protect from your data being exchanged in these markets.

Mountain View, CA based Passware, Inc., a provider of password cracking and decryption technology, announced this morning that its software now can harness the power of Amazon Elastic Compute Cloud– a highly scalable cloud computing platform – for accelerated password cracking, without the need to buy expensive hardware.

McAfee announced this morning that it would acquire Sentrigo, a privately held provider of database security solutions.Sentrigo offerings include database security technologies including vulnerability management, database activity monitoring, database audit, and virtual patching.The acquisition would bring together technologies allowing McAfee customers to:

Hacker Posted Video of Himself Compromising a Hospital’s Computer System on YouTubeJesse William McGraw, a former contract security guard at the North Central Medical Plaza in Dallas, who admitted hacking into the hospital’s computer systems, was recently sentenced to 110 months in Federal prison.

Using its Cyberwar Simulating Product, BreakingPoint will Provide Structured Training and War-Gaming Exercises to Prepare Cyber Warriors to Defend Critical Infrastructure

With Point of Sale Security, Simple Preventative Solutions are Often Taken for Granted and Get Lost in all of the Rhetoric

NetQin Mobile Inc., a Beijing based provider of mobile security solutions, today announced that a Beta version of NetQin Mobile Anti-virus V4.0 is now available for BlackBerry smartphones.Utilizing a Cloud-based model, NetQin's Mobile Anti-virus V4.0 Beta offers anti-virus security to BlackBerry smartphone users and includes the following features:• Protection against threats: The Anti-virus feature incorporates a cloud-based security scan to help identify and eliminates mobile malware.

Made possible by a sponsorship from Google, the University of Maryland, the alma mater of Google Co-Founder and President Sergey Brin, today announced the creation of a new cybersecurity seminar series that will feature a diverse group of speakers from industry, academia, and government, addressing a broad range of topics related to cybersecurity, including technology, policy, and economics.

Cisco today announced a new wireless platform designed to extend the corporate wireless network from the office to remote workers, incorporating existing control, management and security infrastructure.