SecurityWeek

If 2012 has shown us anything about the security landscape, it’s that we’ve come very far in defending against – and deterring – attacks. And we’ve also learned that while we cannot control attackers themselves, we have endless power in our preparation for, and responses to, their attacks. With all of the new security technology and services available, we have the tools we need to raise the defensibility of every layer of our security shields.

SAN JUAN, PUERTO RICO – So long as wireless carriers and phone manufacturers drag their feet on regular operating system updates, Android users will remain vulnerable to malware and other attacks, a technologist and policy analyst said Monday.

MANILA, Feb 5, 2013 (AFP) - The Philippine Supreme Court has again stopped the government from enforcing a controversial cybercrime law, officials said Tuesday, amid concern it would severely curb Internet freedoms. Justice Secretary Leila de Lima said a fresh "temporary restraining order" (TRO) issued by the Supreme Court meant the law passed last year could not take effect.

Despite the fact that a majority of IT respondents say that their cloud deployments were successful, and have saved their respective organization's money, many still do not trust the cloud with sensitive or personal information. Moreover, some fear storing their data in the cloud due to concerns over government or legal action.

After suffering a breach last week that impacted some 250,000 accounts, Twitter is looking to bolster security by investing in two-factor authentication. The news comes by way of a job posting, where the micro-blogging site has asked security developers to come forward.

A document containing business data, including some personal details, from several regional U.S. financial firms was leaked by Anonymous earlier this week. On Tuesday, the Federal Reserve confirmed that one of their systems was breached, but would not directly link the breach to the data released by Anonymous’ OpLastResort.

SpeedTest.net, a free service that tests the performance of Broadband connections, was compromised and made to serve malware, according to security vendor Invincea. The situation has since been cleaned up. Details and pictures can be found here on Invincea's blog.

Google blacklisted the domain of netseer.com in response to a malware attack on the site, triggering a chain reaction that led to a number of high-traffic websites being flagged. This included sites such as ZDNet and The Guardian UK. According to NetSeer, the situation was resolved as of 9:30 a.m. PT.  The situation began when netseer.com was hacked and infected with malware. After the hack, Google added the domain to its list of sites affected by malware, and Chrome and...

Web security firm WhiteHat Security on Tuesday announced that it landed a $31 million round of funding led by JMI Equity, with additional investment from previous investor, Investor Growth Capital (IGC).

Ending weeks of rumors and speculation, Dell Inc. today said that it would be going private in a $24.4 billion deal that would put the company in the hands of founder and CEO Michael Dell and private equity firm Silver Lake.

WASHINGTON - US military officers have endorsed the principle of pre-emptive cyber-strikes if the United States ever faces an imminent and large-scale digital attack, officials said Monday.

WASHINGTON - The US Department of Energy on Monday confirmed it was the target of a cyber attack in January, which stole employee and contractor data, but said no classified data was compromised.

Two researchers have uncovered a new vulnerability in the Transport Layer Security (TLS) and Datagram TLS (DTLS) protocols that allow attackers to recover plaintext from a TLS/DTLS connection when CBC-mode encryption is used.

Network security firm Fortinet released its latest threat report Monday, which covers trends and observations from Q4 2012, including four types of malware aimed at financial theft, and an increase in server vulnerability scanning by hacktivists.

A recently discovered piece of malware is using Google Android as a launch pad to turn Windows PCs into listening devices.