SecurityWeek

Attackers Target Web Hosting Customers

NitroSecurity, Inc., a provider of “content-aware” security information and event management solutions (SIEM), today announced that it has secured $6 million in Series B funding. The company also announced that is has acquired the security business of LogMatrix, a Marlborough, MA provider of network monitoring solutions.

Enterprise Mobile Device Management Tool for iOS 4 and AndroidSybase today announced that is has updated Afaria, the company’s mobile device management (MDM) and security solution for iOS 4 and Android powered smartphones and tablets.

Stuxnet - a Paradigm Shift In Threats and Critical Information Infrastructure Protection

Oracle Critical Patch Update for October, 2010 to fix 81 VulnerabilitiesOracle issued a Pre-Release Announcement this week, providing advance information about the Oracle Critical Patch Update to be released on Tuesday, October 12, 2010.

Akamai Employee Elliot Doxer and What He Disclosed to Federal Agents

Google Account Security ChecklistGoogle today pushed a “Security Checklist,” primarily designed for Gmail users but something useful for all Google Accounts and Google Apps users. Several of the tips are obvious, but some tips and features that Google references may not be commonly used or paid attention to.

New Information Security Resource Provides Guidance that Addresses the People, Process, Organization and Technology Aspects of Information Security. The ISACA this week published the Business Model for Information Security (BMIS), as an educational resource for security professionals and to provide comprehensive guidance that addresses the people, process, organization and technology aspects of information security.

Symantec's New LogoSymantec today officially launched its new company logo. The company says that the new logo “symbolizes the company's focus on enabling confidence and ensuring customers have simple and secure access to their information from anywhere, seamlessly moving between their personal and professional lives.”

Situation Management Solution for Electric Utilities Improves Security Operations and ComplianceOne of the main challenges being faced by electric utilities in the United States today is ensuring effective security operations that can handle incidents in real time, with limited resources across hundreds of sites that are often equipped with thousands of monitored sensors and multiple disparate security and safety systems.

Akamai Employee Arrested on Wire Fraud Charges. Accused of Trying to Sell Information to a Foreign Government.An employee of Akamai Technologies was arrested and charged today in federal court with secretly providing confidential business information to a person he believed to be an agent of a foreign government.

Cyber Protest Group Launches DDoS Attacks Against Spain's Copyright Society 

Protecting Your Data from The Automated Cyber Mafia

AT&T to Offer First Carrier-Provided, Two Factor Encryption Service for Smartphones

Threats from Internationalized Domain Names (IDNs)

McAfee and Citrix Systems have delivered the first product of a joint collaboration announced earlier this year to make virtual desktop security simpler and more scalable for large enterprise deployments. Released today at the Citrix Synergy conference in Berlin, McAfee Management for Optimized Virtualized Environments AntiVirus (MOVE AV) has been specifically designed for Citrix XenDesktop, helping customers secure corporate data and applications delivered to virtual desktops running on servers in the datacenter.

Cisco ASA 5585-X Adaptive Security Appliance and AnyConnect 3.0 Bring Enhanced Security and Performance Features to the EnterpriseCisco announced new products and services this week across several elements of its “Borderless Network Architecture,” Cisco’s vision of connecting anyone, anywhere, on any device -- securely, reliably, and seamlessly.

GFI Software today announced the top 10 most prevalent malware threats for the month of September 2010.

A new report issued by Verizon this week on compliance with the Payment Card Industry Data Security Standard (PCI DSS) reveals that only 22 percent of the organizations assessed were PCI compliant at the time of their initial examination. But compliance is worth the trouble. According to the report, organizations that suffer credit card data breaches are 50 percent less likely to be PCI compliant.

While Bugs May No Longer Be Free, Exploits Really Want To Be