SecurityWeek

A federal grand jury in California has indicted British citizen Ryan Cleary in connection with a hacking campaign last year that hit Sony Pictures and other companies.

On Tuesday, Microsoft patched over two dozen vulnerabilities across the Windows platform. At the same time, criminals started targeted a new vulnerability that has now become the topic of interest within the security-focused community, especially when Google announced that it is being actively exploited.

British Telecommunications (BT) today launched a new security data analysis service designed to help organizations collect, arrange and evaluate big data sets, and present them in “visually insightful ways” in order to help make better decisions.

Imation, a company that focuses on data security and storage, announced this week that the latest version of its Stealth Zone mobile workspace (version 2.1) will include a fully functional version of Windows 7.

According to a recent study coming from Sophos, the idea of perimeter security translating into network security is dead. The research conducted by Vanson Bourne on behalf of Sophos shows that the SMBs are struggling to keep their infrastructure up to date with current working practices, and its feared that this disconnect will equate to larger security risks.  

Shortly after the public learned that some 6.5 million LinkedIn passwords were compromised, the media focused on two stories; one being the breach itself and the aftermath, the other being the various scams targeting LinkedIn users themselves. As it turns out, the second LinkedIn angle created an unintended consequence.

SpexSec, a two-person operation (allegedly) consisting of what’s left of TeaMp0isoN, made a splash this week when they released thousands of records as a means to introduce themselves to the public.

Microsoft patched more than two dozen security vulnerabilities across several of its products and rolled out a new update feature in response to the Flame attacks in a busy Patch Tuesday. This month's security update featured seven bulletins, including three that are rated 'Critical' and touch issues related to Internet Explorer, the .NET Framework and the Remote Desktop Protocol (RDP). The other four bulletins are rated 'important.'

A court in the U.K. sentenced six men for their roles in managing online forums that coached identity thieves in how to commit fraud. The men were: Jason Place, 42, of Gravesend, Kent; Mark Powell-Richards, 59, Bickley, Kent; Allen Stringer, 57, Crossgates, Leeds; Michael Daly, 68, Erith, Kent; Jaipal Singh, 31, Wednesbury, West Midlands and Arun Thear, 22, West Bromwich, West Midlands. Each received various sentences, with Place garnering the stiffest – six years and nine months.

Despite the increased deployment of DNS Security Extensions (DNSSEC), the global threats from phishing have continued to keep security professionals on their guard. The semi-annual “Global Phishing Survey” from the Anti-Phishing Working Group (APWG) provides powerful insight into what is happening in phishing worldwide.

Dell SecureWorks, the managed security services division of Dell, on Monday launched new managed security services for enterprises, including new managed third-party Security Information and Event Monitoring (SIEM) services and managed services for F5’ BIG-IP Application Security Manager (ASM) Web Application Firewall.

South Korean police arrested a man from Seoul last week in connection with a plot to use infected video games to launch cyber attacks on behalf of North Korea. According to Korea JoongAng Daily, police arrested the 39-year-old video game distributor, identified only by the surname Jo, was caught attempting to launch distributed denial-of-service (DDoS) attacks on Incheon International Airport.

WhiteHat Security, a Santa Clara, California based company best known for its Web application security testing solutions, today launched “Sentinel Source”, a new Static Application Security Testing (SAST) solution that helps developers and security teams with continuous concurrent code assessments.

Researchers are warning organizations that a recently-fixed authentication vulnerability in MySQL is simple to exploit.The authentication bypass, called "tragically comedic" by Rapid7's HD Moore, also affects MariaDB and was fixed in recent versions of both products.