SecurityWeek

A Vulnerability Management (VM) program is commonly defined as the “cyclical practice of identifying, classifying, remediating, and mitigating vulnerabilities" . According to Gartner’s report , the purpose of the remediation phase is to harden the environment, prior to eliminating the vulnerability, by using desktop and network security tools, while the mitigation phase role is to eliminate the root causes of the vulnerability by applying a patch to the system.

On Tuesday, prosecutors asked a federal judge to delay sentencing for Hector Xavier Monsegur, better known to some as Sabu, for his role as a cooperating witness. The curt agreed, delaying sentencing for six months.

NEW DELHI - (AFP) - Twitter has agreed to remove six fake accounts which purport to be Prime Minister Manmohan Singh's following a request from the Indian government, the premier's spokesman said on Thursday. The government asked the micro-blogging website to remove the accounts on the grounds that they misrepresented the prime minister and risked increasing ethnic or religious tension.

Seoul - (AFP) - South Korea's Constitutional Court on Thursday effectively killed off a law which bans Internet users from using false IDs, ruling it a breach of freedom of expression. Authorities in 2007 started enforcing the law aimed at curbing the country's notorious cyber-bullying by preventing Internet users from hiding behind false IDs when they write postings on websites. Eight judges in a unanimous decision ruled the law is unconstitutional.

Researchers have identified targeted attacks exploiting the Flash Player bug Adobe patched just last week.

APTs Latest in Cyber-Arms Race

Many users are downloading the fake versions of Flash Player for Android on their mobile devices, according to GFI Labs. 

Three Websites distributing illegal copies of smartphone apps have been ordered to shut down by the federal government, the Justice Department said on Tuesday.

The University of South Carolina (USC) is notifying some 34,000 people after a system intrusion was detected on a computer used by the College of Education. The breach was discovered in June, but the notifications are being delivered in order to allow those impacted to watch their credit reports.

LOS ANGELES - (AFP) - An armed man was arrested in the western United States on Tuesday for allegedly sending an email that threatened President Barack Obama, a justice official told AFP. "He had sent an emailed threat against the president," said Emily Langlie, a spokeswoman for the US Attorney's Office in Washington state, confirming that the man was detained at a suburban apartment in Seattle.

ThreatMetrix, a provider of fraud prevention solutions, has released updates to its cybercrime prevention platform, adding new capabilities for detecting VPN use and phishing campaigns, the company said on Tuesday.

The Apache Software Foundation has fixed over fifty bugs, including two security vulnerabilities, in its venerable Web server software.

The Department of Homeland Security has warned that encrypted traffic sent to and from RuggedCom network products can be decrypted by malicious attackers.

Adobe on Tuesday released updates that address multiple security vulnerabilities across various versions of Adobe Flash Player running on Windows, Macintosh, Linux, and Android.

Apple patched a vulnerability in its remote desktop product where the connection isn't being encrypted correctly. This may result in information disclosure, Apple said in its advisory.