SecurityWeek

Google has had a rough week so far, and it’s only Wednesday. The problems started last Friday, when the Wall Street Journal reported on the findings of Stanford researcher Jonathan Mayer, who discovered the search giant was circumventing Apple’s privacy settings in Safari. Days later, Microsoft accused Google of cheating protections on its own browser, but is Redmond crying wolf?

Cybercrime Never Sleeps—Enterprises and Government Entities Must Take Heed and Improve the Way They Operate Online.

Total Malware Samples Surpassed 75 Million in 2011. Malicious Sites Nearly Double, while Mobile Malware Continues to Grow.McAfee today released its Threat Report for the Fourth Quarter of 2011 which indicated that while malware continues to be created at a wild pace, overall growth of PC-based malware actually declined during the quarter.McAfee also said that it has reached a new milestone in terms of total malware captured to-date which has now surpassed 75 million samples.

The National Institute of Standards and Technology (NIST) today announced plans to establish the National Cybersecurity Center of Excellence and partner with both public and private sector to improve defenses against attackers.

Tufin Technologies has armed the upcoming version of its flagship security suite with new features to improve management.

Securing Critical Infrastructure: Utilities Must Assess The Risks of Their Business Operations and Harden all Devices Attached to the NetworkSixty or seventy years ago when utility infrastructures were first built, they were not interconnected or accessed by third parties. The systems were so isolated, no one outside the organization—including potential attackers—knew what vulnerabilities existed.

Akamai Introduces Integrated Security Suite Designed to Help Enterprises Defend Against DDoS and Application Security Attacks

In my previous column I touched on the point of implementing Web Application Firewalls (WAFs) as part of a measure to prevent clickjacking. I thought I would expand on the benefits of WAFs, and why they can make all the difference between a safe organization and one that’s been compromised. Many IT managers and CIOs still grapple with WAFs because they are expensive and a bear to maintain.

A threat to target the Internet’s root Domain Name System (DNS) servers and knock the Internet offline may be more difficult than the hackers think. Hackers reputedly associated with Anonymous made the threat to launch what they dubbed “Operation Global Blackout” March 31 in response to actions by Wall Street, the Stop Online Piracy Act (SOPA) and “irresponsible leaders and the beloved bankers who are starving the world for their own selfish needs.”

LOIC DDoS Attack Tool Now Available for Google Android Devices

Russia’s political season is heating up. Here in America, we have Super PACs, skewed election coverage, and scandals. As it turns out, Russia has some of that too -- perhaps politics and fighting among party lines is somewhat universal. The difference however, is that we’re not seeing the types of Internet-based activism in America that exists in Russia. Furthermore, when political powers enforce their might in America, it’s a bit more subtle.

Earlier this month, Trustwave had a change of heart and reversed a decision to issue subordinate certificates that allowed a private company the ability to impersonate virtually any domain on the Web. Those actions have led Mozilla to clarify its stance on the issue, and offer one final warning to any company seeking to offer the same business services that Trustwave walked away from.

Defendant Allegedly Sought to be Associated with an Armed Extremist Group, Believed He Would Take Part in al-Qaeda AttackOn Friday, the Department of Justice said that FBI agents had arrested a man for allegedly attempting to detonate a bomb in a planned suicide attack on the U.S. Capitol Building.

In college, I took a required Computer Science class called “Systems Principles”. My professor started the class by listing out the seven key components in a successful system/program development process:1. Requirements2. Specifications3. Design

The Federal Trade Commission and the Bureau of Consumer Protection were attacked by AntiSec Thursday and into Friday, in response to their support and participation in ACTA, the Anti-Counterfeiting Trade Agreement, and issues with Google’s recent privacy policy changes.