SecurityWeek

Coverity, a company that helps developers reduce defects and increase security in their software, announced the results of its "Software Integrity Risk Report" today.

Merchant security solutions provider SecurityMetrics, today announced SecurityMetrics Vision™, a network “threat sensor” designed to help smaller businesses secure their networks and comply with the Payment Card Industry Data Security Standard (PCI DSS).

While securing cloud systems is a top priority, if organizations can't satisfy auditors that regulated data is being managed in a way that is compliant – the move to the cloud may be a non-starter.

Microsoft will acquire Skype for $8.5 billion in cash, the companies announced this morning. Following much speculation, Microsoft officially announced it would acquire the Internet communications company from an investor group led by Silver Lake.

New Research Shows Cybercriminals Moving Operations to Canada

New Solution Helps Provide Visibility Into the Performance and Scalability of Virtualized Infrastructures Making the announcement surrounding the Interop conference taking place in Las Vegas this week, BreakingPoint today unveiled new capabilities, including the addition of a new "Data Center Resiliency Lab" to its offerings.

Lockheed Martin and Carnegie Mellon University announced today that they will conduct joint research and development as they look to shape the future of cyber operations, in a new cyber lab opened by Lockheed Martin near the campus of Carnegie Mellon University in Pittsburgh, PA.

Most organizations aren’t prepared to prevent and respond to web infrastructure failures caused by distributed denial of service (DDoS) attacks and Domain Name System (DNS) failures. These conclusions came from two studies commissioned by VeriSign that show the urgent need for robust DDoS protection, reliable and secure DNS infrastructure, and advanced threat intelligence.

Imperva, a provider of data security solutions, today announced a cloud-based Web Application Firewall service targeted toward small to mid-enterprise businesses looking to achieve PCI compliance, prevent blacklisting, protect against Web application attacks and improve Website performance.

Mobile devices offer well-established benefits in terms of productivity and efficiency gains for employees and enhanced services for consumers. But there’s a catch: The ways smart phones, laptops and tablets interconnect work life and personal life raise serious security challenges for organizations—and the stakes are high.

McAfee has announced a new platform designed to help organizations take advantage of cloud computing in a safe, secure and efficient way.The McAfee Cloud Security Platform operates by securing all content and data traffic – including email, web and identity traffic – moving between an organization and cloud infrastructure.

Back on April 12, 2011, a report from independent security testing organization NSS Labs, warned of a vulnerability affecting industry-leading firewalls, including a sneak attack that could go unnoticed by most organizations. The dangerous vulnerability came in the form of a TCP Split Handshake Attack, an attack essentially being the TCP Equivalent of IP Spoofing.

Symantec Announces Updates Including Endpoint Protection 12, Protection Center 2.0, and Enterprise Vault 10

Fake Facebook Page Admin Notifications Trick Users Into Revealing Email and Postal Addresses Threat researchers from BitDefender are warning of a new scam spreading via Facebook that attempts to capture personal information including email and postal addresses.

While reading recent articles on the Sony breaches, I noticed many comments in the forums saying things like, “if you connect to the Internet, you should consider yourself breached.” Although I understand the sentiment, I can’t help but wonder, is it really that bad?