SecurityWeek

Backupify, a provider of online backup services for cloud application data, today announced that it has secured $9 million in series C funding that will be used to accelerate further development and adoption of its backup tools.

The minds behind the Blackhole exploit toolkit have updated it with an exploit targeting a recently patched vulnerability in Java.

Researchers have uncovered a new Web-based exploit that targets Windows, Linux, and Mac OS X computers.Users visiting a specially crafted website are prompted to run a Java applet that hasn't been signed by a trusted certificate authority, Karmina Aquino, a senior analyst at F-Secure, wrote in a blog post July 10. If allowed to run, the applet checks the user's operating system and delivers a payload customized for that platform, whether it's Windows, Mac OS X, or Linux.

Symantec found two malicious apps on Google Play that may have infected up to 100,000 users before it was removed by Google. The malware posed as two apps, "Super Mario Bros." and "GTA3 Moscow City," and used a remote payload technique to avoid detection, Irfan Asrar, a security researcher from Symantec, wrote on the Symantec Connect blog July 10. Both apps appeared on Google Play on June 24, and racked up between 50,000 to 100,000 downloads in less than two...

Email messaging and Web security solutions firm AppRiver, its mid-year Threat and Spamscape report, noted a significant uptick in malware-laden messages during the first half of this year. The report, which focuses on spam and malware trends, showed strong continued appearances of popular malware including Zeus, SpyEye, and the Blackhole toolkit, and a rise in mobile malware—echoing other recent vendor reports.

How Browser Sync Features Can Pose a Risk to The Enterprise

Plesk, a popular Web hosting control panel – second to cPanel in the hosting market – was recently updated in order to address Remote File Inclusion vulnerabilities. This flaw is being blamed for a rash of website compromises, which successfully targeted some 50,000 domains.

After detecting an increase in malicious attempts to access user accounts, the retail giant Best Buy is alerting customers to reset their passwords. However, it appears that the warning is confusing some users. The letter starts as one would expect; “Dear Valued Best Buy Customer.” From there, the message to customers says that the company is investigating increased attempts from attackers around the globe, who appear to be targeting BestBuy.com and other e-commerce sites.

Formspring, the Social Q&A portal focused on conversations and personal interests, admitted to being breached on Tuesday. The compromise led to the loss of 420,000 hashed passwords, forcing the website to reset the passwords used by every member.

The Google Chrome team has moved the Flash plugin into a separate sandbox on all versions of Windows to make it harder for attackers to exploit.

Microsoft plugged a pair of vulnerabilities in Internet Explorer 9 today as part of a sizeable Patch Tuesday update.

Google is working on a new capability that will allow users to turn off ads, or at least, reduce the number of ads it sees.

Websense announced a number of enhancements today to the latest version of its TRITON Web, email and data security product to help customers fight off attackers.Websense's Advanced Classification Engine (ACE) has been armed with 10 new defenses in TRITON 7.7, including: detecting criminal encrypted uploads, optical character recognition of text within images for data-in-motion and geo-location awareness.

In the security and privacy world, 2012 is turning out to be the year for Internet security bills. From CISPA to CSA to SECURE IT, you name it and there’s been a bill introduced in Congress for “securing” the Internet.

Attackers are increasingly shifting their focus on smaller businesses when crafting targeted attacks, according to Symantec's monthly threat report. The June 2012 Symantec Intelligence Report found that 36 percent of all targeted attacks that were detected over the last six months were directed at businesses with 250 or fewer employees. In comparison, a mere 18 percent of targeted attacks went after small businesses in December 2011.