SecurityWeek

TEHRAN - Iran on Monday removed online blocks on Gmail but a government Internet filtering committee official said other, additional censorship was being prepared against YouTube, according to reports. Internet users in Iran found themselves able to freely access their Gmail accounts for the first time since the blocks were suddenly established on September 24.

The Institute of Electrical and Electronics Engineers (IEEE) disclosed more details regarding the breach that exposed the usernames and passwords of some 100,000 members.

TOKYO - Controversial laws punishing Internet users who download pirated files with fines or jail terms came into force in Japan on Monday.Under the new legislation they could face up to two years in prison or a maximum of two million yen ($25,700) in fines.The revision follows a lobbying campaign by Japan's music industry for measures to curb piracy, but critics and local media have expressed concern.

On Sunday night, news broke that hackers, allegedly linked to the Chinese government, managed to break into a system used by the White House Military Office (WHMO) for nuclear commands.

According to Solve Media, a firm that combines advertising opportunities with CAPTCHAs, and counts Sony, UPS, McDonalds, and Macy’s among its clients, says new research and market surveys show that bots are costing publishers and advertisers billions of dollars annually.

As You Adopt Cloud and Virtualization Technologies in Your Data Center, What Security Requirements Change, and What Stay The Same?

Oracle has released new commercial extensions for MySQL Enterprise during the inaugural MySQL Connect conference, which took place during the Oracle OpenWorld conference in San Francisco. The extensions focus on security and availability, and are available for MySQL Enterprise and MySQL Cluster CGE.

“Ma and Pop sleep with door unlocked” LOUISVILLE - DerbyCon - Saturday afternoon, SecurityWeek sat down with Ryan Sevey, an information security consultant for a utility company, who gave a talk at DerbyCon on security solutions for Small and Mid-Size Businesses (SMBs), with a focus on “Mom and Pop” operations.

LOUISVILLE - DerbyCon – Day two of DerbyCon, which is the only full day of the event (9:00 a.m. – 7:00 p.m.), is taking place in the downtown area of a foggy and overcast Louisville, Kentucky. The weather is the only thing gloomy, as attendees were up early and moving around the conference, despite the fact that many of them (your faithful scribe included) are running on very little sleep.

WASHINGTON - For students seeking to become cyber warriors, the US government has a sweet deal. Full tuition, expenses and a stipend will be paid at any of dozens of universities for students to get specialized cybersecurity training, in exchange for an equal number of years working for a federal agency.

MANILA - A new cybercrime law in the Philippines that could see people sentenced to 12 years in jail for posting defamatory comments on Facebook or Twitter is generating outrage among netizens and rights groups.

V-Key, a Redwood City, California-based startup that makes mobile middleware to help protect mobile applications from threats, this week announced that it has secured $4 million in funding. According to the company, the new cash will be used to fuel research and development in mobile applications security and intelligence technology, and to expand the company’s sales and support operations in the United States and Asia Pacific.

LOUISVILLE - DerbyCon – During his talk on Friday, Rapid7’s HD Moore presented findings to attendees of DerbyCon, which are the result of his research and efforts to map the Internet. He focused on what he calls the “funky little ghost towns” that emerge and the trends that are reviled when one does large-scale mapping on the Internet.

An Estimated 1,700 people arrived in Louisville, Kentucky on Friday for DerbyCon, a weekend filled with training, technical discussions, and fine Kentucky bourbon. This year will be the second time DerbyCon has taken place, hence the conference’s theme of “The Reunion”. If the mood from the attendees is anything to go by, things are off to a great start.

Change is the norm for most security teams, as evolving business requirements as well as new threats dictate new or modified policies and tools. But security change management is handled poorly by most organizations. In some cases, it is “just” inefficient and slow, further contributing to the security department’s reputation of interfering with the business. In other cases it is error-prone, exposing the organization to risks from changes that were executed incorrectly or even causing network outages that can damage...