SecurityWeek

Apple Criticized Once Again for Its Silience and Uncooperative Ways When It Comes to Fixing Vulnerabilities in its Products

NATO said it has awarded a contract valued at approximately $76 million (58m Euro) to a group of private companies for the purpose of upgrading its cyber defense capabilities. Representing its largest investment to date in cyber defense, the organization said the initiative will enable the NATO Computer Incident Response Capability (NCIRC) to achieve full operational capability by the end of 2012.

If you’re being honest with yourself, major successful cyber attacks on companies in the past few years should convince you of the fact that your business could eventually fall victim to a cyber attack.Whether your company is big or small, whether you handle ‘protected’ data or not, whether you have a few customers or millions – a data breach could be a company crippling event.

Arbor Networks has been analyzing some of the malware used to launch DDoS attacks, in order to help educate organizations on the nature of code used to create and manage the DDoS botnets.In a series of blog posts, Arbor Networks examines the operational abilities and design of the Armageddon, Khan, and PonyDOS botnets, or rather the malware that establishes them.

It isn’t often that after a data breach involving credit cards, that the public is also given a marker on the exact amount money lost by consumers as a result. Thanks to the FBI however, we now have a better understanding of what 60,000 stolen credit cards translates to financially, as this data was included in their investigation notes while working the Stratfor case.

 USCC Releases Report on Chinese Capabilities for Cyber Operations and Cyber Espionage

Microsoft has a relatively quiet Patch Tuesday planned for this month, with just six bulletins on the way for next week.

Ford Testing Firmware Update Program, Encourages Customers to Have a Unique USB for Each Ford They OwnThis month, Ford is borrowing something from the software industry: updates. With a fleet of new cars using the sophisticated infotainment system they developed with Microsoft called SYNC, Ford has the need to update those vehicles—for both features and security reasons. But how do you update the software in thousands of cars?

Kaspersky Lab Researchers Say Parts of Duqu Are Written in an Unknown Programming Language, Uses Asynchronous Commutations

Google showed a great deal of confidence ahead of the CanSecWest conference this year when it announced plans to offer up to $1 million in rewards for a successful exploit against its Chrome browser. The company even launched its own Pwnium contest.

The National Security Agency/Central Security Service officially opened its new "Georgia Cryptologic Center" this week. Celebrated with a ribbon-cutting ceremony on Monday, the new $286 million, 604,000 square foot complex will provide cryptologic professionals with the latest state-of-the-art tools to conduct signals intelligence operations, train the cryptologic workforce, and enable global communications.

After news of the FBI’s arrest of LulzSec’s leader Sabu became public, including the fact he was a cooperating witness in an ongoing criminal investigation, Panda Labs published a blog post titled “Where is the lulz now?” Not long after that post was made, AntiSec supporters attacked Panda Security, defacing more than 30 sub-domains used by the company.

I have a confession to make: Like many security professionals, I have a love-hate relationship with Governance, Risk Management and Regulatory Compliance (GRC).

Trend Micro today announced that it has hired Tom Kellermann for a newly created position in the company, U.S. Vice President of Cybersecurity.

A Hands-on, First Look at Dome9 Security’s LiteCloud Automated Cloud Security Firewall Management Service