SecurityWeek

Despite the risk of steep fines and increased transaction fees, many businesses are still failing to maintain compliance with the Payment Card Industry Data Security Standard (PCI DSS). That’s according to a new report today from Verizon, showing that for the second year in a row, many businesses are struggling to comply with payment card security standards and putting consumers' information at risk.

Following customer outrage and privacy concerns over a policy to continue tracking drivers with GPS technology even after they have cancelled service, OnStar today said it has reversed its proposed policy changes and won’t be keeping a data connection to customers’ vehicles after the OnStar service is canceled.

Microsoft Crushes Another Botnet: "Operation b79" Neutralizes Kelihos BotnetMicrosoft today announced it has taken down the notorious Kelihos botnet, scoring yet another legal victory in the battle against the botnet business.

Industrial Defender, a provider of security and compliance solutions for automation systems, today announced new Managed Security Services for Automation Systems, targeting potential customers in critical infrastructure sectors, including utilities, chemical, water, oil and gas.

Should IT Managers be Worried that the Security of their Mobile Workforces will Depend on the Whims of Apple and Google? Friends, RIM fans, consumers: I come here to bury the PlayBook, not to praise it.

Like all computers, automobiles can be hacked and compromised. As auto manufacturers continue to rush new features to market, security cannot continue to be an afterthought.If you’ve watched Gone in Sixty Seconds or played the video game, you’ve seen how easily a car can be hotwired—especially older models. Just pry open the steering column, connect the battery wires and touch the starter wires together. Vroom!

Perimeter E-Security Offers Hosted Log Management Solution with Simple Pricing ModelLog Management, including Security Information Event Management (SIEM) is considered essential when it comes to IT best practices, and for regulated industries it’s a requirement when it comes to compliance. Log management isn’t very complex in theory, but managing increasingly complex networks, and an ever-growing number of applications and virtual servers, log management can pose a challenge for many organizations.

A malware attack targeting MySQL.com was detected today redirecting users to malicious sites hosting a notorious crimeware kit.According to researchers at Armorize, the Oracle-owned Website was compromised today but has since been cleaned up. While the attack was underway, users who visited the site were infected and redirected to a site hosting the BlackHole exploit kit.

A decision by OnStar to continue tracking drivers with the company’s GPS technology even after they have cancelled service has drawn the ire of privacy advocates.

Zscaler, a provider of cloud-based Internet security services, today released tool designed to help protect against malicious threats, scams and spam propagated on Facebook through a technique called "Likejacking."The tool, Zscaler Likejacking Prevention, comes in the form of a Web browser plug-in and is currently available for Firefox, Chrome and Safari browsers.

On Friday, the last of 27 defendants arrested in connection with a global cybercrime operation that compromised dozens of accounts and used false identities to open hundreds of bank accounts, pled guilty and now faces up to 45 years in prison.

Now is the time to start a journey of security transformation that adapts to changing threats and opportunities, to create a high performing security operation.

Self-encrypting hard drives automatically and continuously encrypt all data in the drive itself, protecting it from loss, theft or attack. This type of technology is becoming more important as we continue to see data loss incidents plague organizations around the world.Data storage industry analyst Dr. Thomas Coughlin, who has more than 30 years in the data storage industry, this week revealed the industry’s first forecast examining the adoption of self-encrypting drives (SEDs).

Yesterday, Cody Kretsinger, a 23-year-old from Phoenix, Arizona was arrested and charged with conspiracy and the unauthorized impairment of a protected computer, according a federal indictment.How did the Feds track down the alleged LulzSec member? It turns out that a VPN service reportedly used to mask his online identify and location was the one who handed over data to the FBI.

Three of the four most prevalent attack techniques observed were used by LulzSec during their summer hacking rampage.