SecurityWeek

Vulnerability in HTC Android Devices Leaks Phone Numbers, Location, SMS, Emails Addresses, and More

Considerations That can Help Enterprises Protect Themselves Against MalwareThus far 2011 has had the ignominious distinction of being the year of the breach, and modern malware has been one of the key transformative technologies that have enabled hackers to become far more intelligent and persistent in their attacks.

Company Conspired to Fix Prices of Drives Sold to Dell, HP, and Microsoft; Agrees to Pay $21.1 Million Criminal FineHitachi-LG Data Storage, a joint venture between Hitachi and LG Electronics, has agreed to plead guilty and to pay a $21.1 million criminal fine for its part in a scheme to rig bids and fix prices of optical disk drives.

Kingston Digital this week launched a USB Flash drive that protects sensitive data with Federal Information Processing Standard (FIPS) 140-2 Level 3 Validation and 100-percent encryption.

McAfee today said that it has appointed Jean-Claude Broido as president of McAfee Japan.Broido brings over 30 years of sales and marketing leadership experience in the US, Europe, Asia and Japan, most recently as senior vice president of International Sales at EMC’s Information Intelligence Group. Prior to EMC, Broido was executive vice president and general manager of EMEA for Documentum.

We’re not talking about plain old rules, but rather mandated rules as defined in a federally enacted legislation. As someone with a career in information security, my first answer is “yes, regulation is good for security.” Regulation helps make sure that people and companies are protecting the security of their systems, networks, and information, even minimally. If you are faced with regulatory compliance, you are faced with a legal issue. And, if you are not compliant, you are essentially breaking...

IBM researchers are predicting 2011 will see twice as many mobile exploits as 2010.

In 2009, Vivek Kundra was named as the country's first CIO and was charged with improving efficiency while also making government data more available to the public. Part of his plan was to transform federal IT management with a cloud-first policy and get away from wasteful spending on IT infrastructure. We’re slowly seeing a shift take place, and today an announcement was made on another set government IT assets moving to the cloud.

Vendors That Don't Test Products Before Selling Them are Doomed to be Targets of Future Research and Attacks

Flashback Mac Trojan Cloaks Itself as Adobe Flash Update, Opens Backdoor to Mac OS SystemsIt has been a busy few days in the world of Mac malware.

Defendant planned to attack the Pentagon and the Capitol using aircraft similar to “small drone airplanes” filled with explosives and guided by GPS equipment.

TRICARE Breach Potentially Puts 4.9 Million Individuals at RiskA massive data breach that could potentially affect 4.9 million individuals who received services from TRICARE, a provider of health care services to active and retired military personnel, was disclosed this week.

Avoiding Compliance, Audit and Operational Risks. Are you Gambling a Successful Audit on Key Management Processes that Fail to Measure up?

IT security talent is in high demand across government agencies and private companies, with a shortage of resources among the federal agencies that is creating a challenge in managing successful cybersecurity operations. Last year, the U.S. Cyber Command, which was scheduled to be “fully operational” by October 1st, missed its deadline, primarily due to the challenge of finding qualified personnel.

Juniper Networks today announced new enhancements to its Junos Pulse Mobile Security Suite, bringing new mobile device management and security controls, as well as an API to allow service providers and OEMs to integrate with the platform.