SecurityWeek

Operation Free Assange, Anonymous’ latest campaign in support of the WikiLeaks founder, has taken aim at various Swedish and UK government websites knocking at least two of them offline, while defacing another.

In response to the code required to crack MS-CHAPv2 sessions being published to the Web, Microsoft has issued a security advisory for organizations that may need guidance. However, the software giant has made it clear that while the issue is worth addressing, it is not something they plan to address with a security update.

While SQL Injection Attacks are Growing in Frequency, Savvy Application Developers Can Find Enough Available Tools to Combat Them

NEW DELHI - (AFP) - India has demanded social networking websites take down provocative messages and blocked some online content after anonymous threats sparked an exodus of migrants from southern cities. Tens of thousands of workers and students from the remote northeast region returned home last week from Bangalore, Mumbai and other cities fearing attacks from Muslims in reprisal for recent ethnic clashes in the state of Assam.

A new report from Arxan Technologies says that there are hacked versions of almost all of the most popular applications available in Apple and Google's mobile app stores being sold in third-party markets. 

PARIS - (AFP) - Wireless routers for homes and offices could be knitted together to provide a communications system for emergency responders if the mobile phone network fails, German scientists reported on Monday. In many countries, routers are so commonplace even in medium-sized towns that they could be used by fire services, ambulance and police if cellphone towers and networks are down or overwhelmed by people caught up in an emergency, they say.

The Securities and Exchange Commission (SEC) on Friday said that it took actions to halt what they are saying was a $600 million Internet-based Ponzi scheme. The SEC said that it took “emergency actions” and froze assets controlled by Paul Burks of Lexington, North Carolina and his company, Rex Venture Group, operator of the website ZeekRewards.com.

The Cloud Security Alliance (CSA) today announced additional details on its Open Certification Framework, an industry initiative to provide security certification for cloud providers.

SafeNet Launches High Security Encryption Appliance for Network Attached Storage (NAS)

A recent study from Four Points by Sheraton shows that of their business travelers, a majority carry three to four devices with them, which are both for business and personal use. While the hotel’s study was aimed at how well they serve business travelers, it offers a different perspective on BYOD risk.

Defense contractor General Dynamics today said that it would acquire Fidelis Security Systems, a provider of network security tools that provide real-time network visibility, analysis and control. The terms of the deal have not been disclosed, but the acquisition has been approved by the boards of both companies and is expected to close in the third quarter of 2012.

You’ve handed over controls to a third-party, so how do you implement the right levels of security in a cloud environment, trust the provider to take care of the rest, and still meet compliance initiatives?

San Francisco, California-based NCC Group today said that has acquired Intrepidus Group, a security research and testing services provider focused on the mobile sector. NCC Group offers Enterprise Risk Management solutions and other services including software escrow, IT assurance with verification and validation testing, security testing for SaaS applications, due diligence for mergers & acquisitions and more.

Apple has responded to a French iOS hacker’s discovery of a spoofing problem within iOS’ implementation of SMS. If abused, there is a serious potential for Phishing attacks on the devices, but Apple seems to be passing the buck somewhat.

Over the weekend, chipmaker AMD had a bit of a problem when a group known as R00tbeer targeted their WordPress installation and managed to deface the domain as well as walk away with the SQL file used to manage the content management system (CMS).