SecurityWeek

New Tool Checks To See If MySQL Servers Are At Risk From The MySQL CVE-2012-2122 Vulnerability

Attackers can remotely login to a control system used by electric utilities and oil and gas companies via a backdoor to gain administrative access, according to the Department of Homeland Security.

Salesforce.com unveiled a new identity management to bring "Facebook-like" identity platform to the enterprise.

Cyber Espionage Attacks Hit Philippine Oil Company and Canadian Energy FirmResearchers from Dell SecureWorks’ Counter Threat Unit say they have discovered yet another cyber espionage campaign targeting oil and energy companies. 

Employees are increasingly turning to web-based or web-enabled applications to help get their jobs done. To combat the risks associated with these applications, one of the most significant evolutions in network security over the last few years has been the advent of application control. This technology gives administrators visibility and control over each application that is allowed to communicate on the network.

IBM's X-Force 2012 mid-year report found a sharp increase in browser-related exploits, Mac-based attacks, and SMS related scams. Since its last Trend and Risk Report, released at the beginning of the year, IBM's X-Force has seen an increase in malware and malicious Web activities, a disconnect in how corporations implement "bring your own device" (BYOD) programs, and increased concern in how users are selecting passwords to protect their various Web accounts.

MANILA - The Philippines said Thursday it had deported 279 Taiwanese accused of running a multi-million-dollar online scam that prompted stepped-up airport screening to guard against criminal gangs. The Taiwanese were put on two chartered flights on Wednesday to Taipei, where they face prosecution, immigration spokeswoman Antonette Mangrobang said.

On Wednesday, Microsoft released a FixIt tool for those wanting some automated protection from the latest Zero-Day for Internet Explorer. However, if users at home are using caution as they surf the Web, and organizations are being proactive, it might be easier to wait until Friday, when Microsoft will issue an out-of-band security update to their browser, fully addressing the problem.

Veracode Launches Vendor Application Security Testing ProgramApplication security testing firm Veracode on Wednesday launched an automated program to help businesses evaluate security risks associated with third-party software.

According to security vendor Incapsula, August was a busy month for Web Application attacks. The company's latest "attack heat map report" shows some interesting snapshots of the Web, including an overall attack level in Denmark of 0.74 percent, which was launched from a single source.

NEW YORK - A US financial industry group warned banks and other institutions to beware cyber attacks Wednesday, after some firms reported sporadic problems with their websites. The Financial Services Information Sharing and Analysis Center said it raised its cyber threat level from "elevated" to "high."

EMC said today that it has acquired Montreal-based Silicium Security, a developer of endpoint monitoring technology that helps security teams detect and mitigate unknown and advanced malware. Originally developed for a Canadian government customer, the Company’s says its flagship product, ECAT has been deployed since 2007.

GlobalSign And Netcraft Partner To Launch Real-Time Phishing Attack AlertsCertificate authority GlobalSign has partnered with Netcraft to alert customers in real-time if their websites are being used to support phishing attacks.

LOUISVILLE, KY — A computer programmer from central Kentucky who once did contract work for Toyota has been charged with hacking into and damaging computers used by the automobile maker.

RSA's latest services offering includes incident response and breach readiness assessment to help organizations prepare for, respond to, and mitigate cyber-threats.