SecurityWeek

Rush for New Technology Often Makes Security an After-Thought, Putting Organizations at RiskAccording to Ernst & Young’s just-released 2011 Global Information Security, organizations are rushing to adopt new technologies including cloud computing, tablets and social media, but are often leaving security as an after-thought.

Researchers at Symantec have uncovered a way to fool Facebook users into defeating the social network’s defense against cross-site request forgery attacks.

After one of their own was kidnapped while participating in Operation PaperStorm, Anonymous has threatened to expose the Zetas drug cartel unless the Anon is released. The comments, made in a video posted to YouTube, inform the Zetas family that they’ve made a huge mistake with the kidnapping, and give them until Saturday to respond.

Visibility and Control over as Much Network Traffic as Possible will Leave Malware with Fewer Places to Hide.

In Mumbai, Indian authorities seized components from servers in a data center, after Symantec informed them that they were communicating with the command and control (C&C) infrastructure used by Duqu, the Trojan that is touted as the precursor to the next Stuxnet. However, experts are now saying that the connection between the two malicious programs is questionable.

Initiative Will Focus on Creating Cyber Education Programs for K-12 through Career and Technical Education Levels.The National Cyber Security Alliance (NCSA), acting on behalf of the National Cybersecurity Education Council, has signed a memorandum of understanding with the US Dept. of Education (DOE), to establish cybersecurity related training programs in schools across the nation, grades K-12.

Balancing Risk and Reward in Information Security: Are you Willing to Spend X to Avoid Y?My daughters tell me that I am too careful and I over-think decisions. I research a car before buying, and build a spreadsheet that includes things like warranties and total cost of ownership for a year. I think, however, that I am just practical.

Red Hat today announced that it has joined Facebook’s Open Compute Project, a non-profit foundation with a simple, yet challenging goal – design the most efficient computing infrastructures at the lowest possible cost.With this goal in mind, Red Hat is now part of the ecosystem of engineers, architects and developers that are looking to redefine the next-generation datacenter. As the largest provider of open source software and services, this is a huge addition of support to the project.

What Do 4G/LTE Networks' Entirely New Infrastructure Mean for Security?By now, we’ve all seen the uncharacteristically techie ads for 4G/LTE phones and services. Even for those of us who don’t know that LTE stands for Long Term Evolution, the 4G postscript reassures us that we are going to get more, better, and faster. After all, the “Gs” have been part of our vernacular and consciousness for a while.

Microsoft has dismissed a lawsuit against a company it contended a month ago was at the heart of the now-defunct Kelihos botnet.In September, Microsoft named Dominique Piatti and his company dotFree Group SRO as controllers of the botnet. The move marked the first time Microsoft had named a defendant in one of its botnet-related civil suits.

Last week, Duqu, the next-step toward the next-generation Stuxnet, was revealed by researchers, although its pedigree and the intended target remains the subject of much debate.

What Can we Learn From Some of the Significant Hacks in 2011?As we round the corner to the last quarter of 2011 and move into the busy holiday season (for hackers too), it’s a good time to look back at some of the hacks that made headlines this year. And 2011 was a monumental year for hackers. Businesses as well as consumers felt the brunt of cybercrime by the millions, some of them a few times over. Here’s a look...

Tru.ly, a provider of Internet-based age verification services, today released an age verification API that lets developers integrate age verification into apps and authenticate the age of an online user based on government issued data.

IP Blacklisting is not as Black or White as it sounds. IP Intelligence Should to be Used to Help flag Malicious Attack Sources.

The company behind the iconic Snort, Sourcefire, has increased its Intrusion Detection and Prevention line to include Red Hat Enterprise’s virtualization offerings. With this addition, Sourcefire’s virtual offerings now cover the markets most used platforms including VMWare and Xen.