SecurityWeek

Apache Tomcat Server Backdoor Worm SquirmingMalware hunters at Symantec have intercepted a malicious backdoor worming its way though servers running the open-source Apache Tomcat servers. 

WASHINGTON - A US panel Wednesday called for tougher action against China, including possible sanctions to stop cyber spying, warning that Beijing has yet to be persuaded to end rampant espionage.

The US Department of Defense (DoD) has published an amendment to the Defense Federal Acquisition Supplement which will require defense contractors to incorporate established information security standards across their unclassified networks and to report "cyber-intrusion incidents" that result in the loss of unclassified controlled technical information.

Security researchers at Trusteer are calling attention to a new malware toolkit that uses the I2P (Invisible Internet Project) networking layer to mask communications between infected machines and the botnet's command-and-control server.

WASHINGTON - The US Supreme Court Monday blocked a challenge to the National Security Agency's vast email and telephone surveillance program.  Without giving any explanation, the country's top court rejected the appeal filed by the Electronic Privacy Information Center, or EPIC, asking the justices to halt the spy program.

CloudLock Expands Security and Compliance Solution to Salesforce CloudLock, a provider of cloud information security solutions, this week announced that it has extended its security suite to cover popular cloud service Salesforce.com.

Mobile security startup Mojave Networks this week announced that it has closed a $5 million round of funding, in addition to launching a cloud-based, enterprise-grade solution that protects mobile devices starting at the network level. 

Wind River, a subsidiary of Intel Corporation that provides embedded software for connected systems, this week announced updates to its platform for securing critical infrastructure.

BRASÍLIA - Brazil on Monday stood firm on its demand that tech giants such as Google and Facebook store local customer data in this country to ensure greater privacy. "We are sticking to our plan to include a proposal to store the data in the country" in legislation currently being debated in Congress, Communications Minister Paulo Bernardo said.

VMware and Palo Alto Networks have teamed to offer an integrated solution to protect data centers and ensure the deployment of security services keeps up with the deployment of virtual machines.

KOBLENZ - A German court Tuesday sentenced a former NATO employee to seven years in jail for spying after the IT expert copied secret data in order to sell it to a foreign intelligence service.

Uncertainty is not the word organizations want associated with their IT security posture, but in many cases, the shoe seems to fit, a new study has found.

The Cryptolocker (also known as Crilock) ransomware attacks are showing no signs of slowing down with one anti-malware company counting more than 10,000 infections in the United States alone.

Google's push to ferret out security holes in external products has been expanded to include the OpenVPN and Apache https, two of the most widely deployed open-source programs.

WASHINGTON - Bitcoin supporters told a US Senate hearing Monday the virtual currency unit should not be viewed negatively by authorities despite its links to crime.