SecurityWeek

After enterprise software firm Sybase released patches to address critical vulnerabilities in its relational database management system over the summer, it turned out the security holes had not been completely closed. Months later, the flaws still remain, database security experts said.

Symantec recently published a blog post detailing two new methods being deployed to avoid malware detection and analytics. According to research, criminals are taking a low-cost / low-tech approach and using sleep loops along with basic monitoring to avoid getting caught.

SAN FRANCISCO - A New York man with a shady past was arrested on Friday for using a forged contract with Facebook co-founder Mark Zuckerberg to lay claim to half of the world's leading online social network. Paul Ceglia, 39, faces a pair of fraud charges that each carries a maximum sentence of 20 years in prison, according to federal prosecutors.

Rapid7, the Boston-based security firm behind the popular Metasploit and Nexpose testing frameworks, today announced tha Mike Tuchen has stepped down from his role as CEO and will be replaced by Corey Thomas who will serve as President and CEO of the company.

Security vendor nCircle used brief surveys conducted during webinars to highlight the state of network configurations that utilize insecure protocols and settings. Based on the data, the saying "easier said than done" has certainly become a reality.

Stoke-on-Trent City Council (UK) has been smacked with a £120,000 fine for failing to secure sensitive information that was being transmitted electronically. The data, child protection documents, was accidentally delivered to a person not related to the case, and wasn’t properly encrypted the Information Commissioner’s Office (ICO) said, posing a significant breach of the Data Protection Act.

WASHINGTON - Defense Secretary Leon Panetta on Thursday demanded Congress take action after November elections to ensure stable funding for the US military and to break a partisan deadlock over the country's budget deficit. "When Congress returns to town after the election, there is a great deal of critical work that needs to be done," Panetta told a news conference.

Researchers Find Nine Application Technologies Overlooked By Most Web Application Scanners

According to a new report from the Anti-Phishing Working Group (APWG), an industry organization focused on combating phishing and cybercrime, the average uptime of phishing websites dropped during the first half of 2012. That’s a good thing, as the longer a site hosting phishing attack remains online and accessible, the more money and data cybercriminals can pilfer from victims.

I’m sure you’ve read about the recent cyber attack campaigns against financial institutions, and have probably wondered why and how they have been so successful? The reason is quite clear.

When mathematician Zachary Harris was examining a job pitch from a recruiter at Google, he discovered a flaw in DKIM that allowed him to spoof emails from the Internet giant’s domain.

Now that September has come and gone, many security firms are publishing their Q3 reports, loaded with malware and cybercrime trends and statistics.

Earlier this week, SecurityWeek reported on an initiative from Verdasys to push the term "DLP 3.0" it their launch of Digital Guardian 6.1.

LAS VEGAS - McAfee FOCUS - Xerox and McAfee unveiled a new layer of security protection for printers at the McAfee FOCUS 12 conference this week in Las Vegas. The two companies discussed how McAfee's Embedded Control software – a filtering method that allows only approved programs to get through - will be used by multifunction printers to prevent attacks.

LAS VEGAS - McAfee FOCUS 2012 - Solving security challenges to critical infrastructure companies requires partnerships between vendors, a panel of solution providers and experts said today at McAfee's Focus conference in Las Vegas. Working closely with suppliers, explained Gary Woodward, director of business development at Emerson Process Management and Water Solutions, ensures that products are integrated and working optimally.