SecurityWeek

A new survey of Black Hat attendees shows many are not afraid to fight back against hackers with their own tactics. The legalities of cyberspace can be complex – particularly when organizations consider whether offense is the best defense.

In a talk at Black Hat, Apple's Dallas De Atley Shared Few New Details; Disappoints Attendees

A survey from security firm nCircle suggests that retaliatory hacking is not universally frowned upon.

LAS VEGAS - BLACK HAT USA - A panel of security and privacy experts engaged in a free-wheeling discussion of how enterprises have invested in security over the years and beefed up their defenses, but there was still a long way to go.

Just in time to throw a poolside Cabana party at the Black Hat conference, Chantilly, Virginia-based PhishMe Inc., a company that teaches security awareness to help users identify “Phishing” or targeted attacks, today announced that it has closed a $2.5 million Series A funding round.

LAS VEGAS - BLACK HAT USA - The Federal Bureau of Investigation revamped its approach to fighting terrorists after 9/11. Corporate America can apply those lessons to protect the networks from cyber-attackers, a former official told attendees at Black Hat security conference.

After its command and control (C&C) servers were taken offline last week, it was assumed that the Mahdi (or Madi) operation was finished. Mahdi, the name given to malware that was discovered to be targeting systems in the Middle East, has returned however, and its newest version has some creative changes.

Examining the patterns taken from data collected in the aftermath of more than 140 million blocked infection attempts, security vendor Trend Micro says that targeted attacks against individuals and organizations are on the rise.

Security researcher Don C. Weber spoke about OptiGuard, a tool that can be used to assess the security of smart meters. The talk was pulled earlier this year at the ShmooCon conference.

The World Wide Web (WWW) has come a long way during the last decade. By contrast, the HTTP protocol, which provides the communication application layer, has remained pretty much stable throughout that period. Changes to HTTP's specifications last occurred in 1999 when HTTP version 1.1 RFC was finalized by the by the Internet Engineering Task Force (IETF).

Trustwave and Microsoft Team to Bring Open-Source Web Application Firewall ModSecurity To IIS and Ngix Web Servers

Just before the launch date of Apple’s latest and greatest, Mac OS X 10.8 (Mountain Lion), security vendors were in a flutter over the claimed discovery of a new piece of malware that targets Mac users. Yet, the malware hasn't been found in the wild, and it was discovered within a repository designed to share potentially malicious samples with the security community.

LAS VEGAS - BLACK HAT USA – RSA, the security arm of storage giant EMC, today unveiled a new service designed to stop malicious applications on mobile devices. The offering, the company says, comes at a time where there is a need to counter the emergence of malicious and unauthorized apps appearing in mobile app stores.