SecurityWeek

To Effectively Manage Risk, Security Teams Must have the Ability to Turn Event Data into Actionable Information to Mitigate Rising Threats and Vulnerabilities.

Adobe has issued a warning of a newly identified critical vulnerability in its Flash Player, and that the vulnerability is being exploited in targeted attacks via a Flash (.swf) file embedded in Microsoft Excel (.xls) files delivered via email.

Anonymous, the group of online hackers notorious for its politically charged “hacktivism,” has released a massive batch of internal Bank of America emails.

In order for Virtualization to Establish itself as a Widely Trusted Approach to Infrastructure Deployment, Adaptive Security Technologies are Necessary

Today’s tragic events of the 8.9 magnitude earthquake and resulting Tsunami, as sad as it is, is a dream for scammers and fraudsters around the world.

New DNS Security product Helps Prevents Connections to Known Malicious Internet Locations

Call them errors behind the keyboard, cockpit errors, or wetware errors. Sometimes we just say “oops.” But, these terms do not do them justice. In reality, whatever you call them, they are the bane of our existence. Studies show varying ranges on how many of the vulnerabilities, errors, and subsequent data and/or system compromises we see because a user or admin did something wrong. But, do we have any sense for how negligent we, as users, really are?

Nadeem Akhtar of Maryland faces charges for the illegal exportation of items that are used directly or indirectly in activities related to nuclear reactors and the processing and production of nuclear-related materials.“The indictment alleges that Nadeem Akhtar conspired to violate export regulations by selling controlled items while misrepresenting what they were and to whom they would be sold” said U.S. Attorney Rod J. Rosenstein.

Understanding DLP Deployments for Email - Why focus on Email? Because it is the Most Likely Vector of Leakage

Last week we looked at how underground markets operate. Similarly to any market economy, the goods being traded in these markets are driven by supply and demand. There is no Consumer Price Index (CPI) for these illicit items. Yet, by tapping into hacker forums we can see the different goods being sold in these forums, as well as their asking price.

Forward-thinking Companies are Avoiding Checkbox Compliance and Fire-drill Responses to Security Incidents in Favor of Sustained, Continuous, and Auditable Risk Management and Compliance Initiatives. But there’s Still Work to be Done.

According to recent research conducted by Mimecast, while 71% of employees understand the risks, 47% still feel that it’s okay to use personal accounts to send work emails. The goal of Mimecast’s Generation Gmail Research project is to reveal how email is used by employees across the globe. And, in this particular segment, how attitudes about work email are changing and how progressive employers are managing this core communication channel.

New VMware View Client for iPad Lets Enterprise and Government Users Securely Access Their Virtual Desktops From AnywhereVMware today released a client that provides iPad users with a simple and secure way to access virtual Windows desktops, applications and data from their iPad. Available for free in the Apple App Store, the new VMware View Client, in combination with VMware View, delivers a modern desktop optimized for the iPad's high-resolution Multi-Touch display.

Compliance Requirements, Legal Ramifications, and other Drivers with Real World Risks and Consequences are Often the Best way to Bend the Ear of a Busy Executive

The inventor of the popular SecurID security tokens used for two-factor authentication, now owned by RSA, has come public with his latest endeavor, focused on mobile payment technology and identity authentication.

Fraudster used Genuine Medicare Beneficiary Information Illegally Obtained, Setup Clinics that Never Physically Existed

According to recent statistics coming from Dasient, a firm that helps discover and combat Web-based malware, “malvertising,” a growing method used to distribute malware via advertising tags served through an unsuspecting publisher’s Web site, saw a significant spike in Q4 2010. Dasient estimated that in the last quarter of 2010 there was a 25% increase in malvertising [ad] impressions based on the same set of networks the company monitored in Q3.

Today, Symantec and the Ponemon Institute released the 2010 Annual Study: U.S. Cost of a Data Breach, showing the rising cost of data breaches over the last five years. The average organizational cost of a data breach increased to $7.2 million. The study also found that for the second straight year organizations' need to respond rapidly to data breaches drove the associated costs higher. The sixth annual Ponemon Cost of a Data Breach report is based on the actual data...

Europe's Cybersecurity Agency Publishes Botnet Report and Policy-Level Considerations