SecurityWeek

On Wednesday, Microsoft released a FixIt tool for those wanting some automated protection from the latest Zero-Day for Internet Explorer. However, if users at home are using caution as they surf the Web, and organizations are being proactive, it might be easier to wait until Friday, when Microsoft will issue an out-of-band security update to their browser, fully addressing the problem.

Veracode Launches Vendor Application Security Testing ProgramApplication security testing firm Veracode on Wednesday launched an automated program to help businesses evaluate security risks associated with third-party software.

According to security vendor Incapsula, August was a busy month for Web Application attacks. The company's latest "attack heat map report" shows some interesting snapshots of the Web, including an overall attack level in Denmark of 0.74 percent, which was launched from a single source.

NEW YORK - A US financial industry group warned banks and other institutions to beware cyber attacks Wednesday, after some firms reported sporadic problems with their websites. The Financial Services Information Sharing and Analysis Center said it raised its cyber threat level from "elevated" to "high."

EMC said today that it has acquired Montreal-based Silicium Security, a developer of endpoint monitoring technology that helps security teams detect and mitigate unknown and advanced malware. Originally developed for a Canadian government customer, the Company’s says its flagship product, ECAT has been deployed since 2007.

GlobalSign And Netcraft Partner To Launch Real-Time Phishing Attack AlertsCertificate authority GlobalSign has partnered with Netcraft to alert customers in real-time if their websites are being used to support phishing attacks.

LOUISVILLE, KY — A computer programmer from central Kentucky who once did contract work for Toyota has been charged with hacking into and damaging computers used by the automobile maker.

RSA's latest services offering includes incident response and breach readiness assessment to help organizations prepare for, respond to, and mitigate cyber-threats.

According to research from security firm AlienVault, there appears to be a connection between the "PlugX" gang out of China and the latest Internet Explorer vulnerability. The connection comes from a payload being delivered by sites using the vulnerability to target systems, which has the same attack process used by the PlugX gang.

Google has always had a sharp nose for rising Internet trends. Just recently, the search giant announced that it had acquired VirusTotal, an anti-malware start-up company to beef up protection for its Internet services.

TOKYO - At least 19 Japanese websites, including those of a government ministry, courts and a hospital, have come under cyberattack, apparently from China, police said Wednesday. Many of the websites were altered to show messages proclaiming Chinese sovereignty over the Diaoyu islands, a Japanese-administered chain Tokyo calls Senkaku, the National Police Agency (NPA) said in a statement.

Researchers at FireEye recently detected two new Grum command servers, as the botnet’s owners attempted to remain under the radar as they rebuilt it. The rebirth was short-lived, as the C&Cs (hosted in Turukey) were taken offline within hours.