SecurityWeek

In response to the increase in attacks on industrial control systems that power utilities, industries and critical infrastructure systems, Norway-based Norman ASA is launching a product designed to protect SCADA (supervisory control and data acquisition) systems against cyber attacks from malware such as trojans, worms and viruses—ones like stuxnet.

The Hands-off Approach to Monitoring and Managing Threats that Transit an ISP’s Network is Putting Businesses and Government at Risk.

FBI Director Pays Visit to Thank Latvian and Estonian Officials for Their Cooperation in Operation Ghost Click, Looks for Future Cooperation

FishNet Security today launched a new cloud-based threat monitoring and response service aimed at helping businesses log information security events across multiple sources, reduce data leakage, and proactively respond to emerging threats and meet regulatory requirements.

Juniper Networks today released its 2011 Mobile Threats Report which showed a 155 percent increase in mobile malware across all mobile platforms in 2011, and a whopping 3,325 percent increase in malware specifically targeting the Android platform in the last seven months of 2011 alone.

Both the BATS and NASDAQ exchanges were under constant assault early this week, thanks to a flood of packets sent their way by an unknown group or person. These recent attacks are just the latest in a string of attacks that have hit the UN, CIA, and others.

The Waledec botnet, which was taken down in 2010 by Microsoft, was responsible for more spam delivery than any other botnet in its class with a reach of about 1.5 billion emails a day. Earlier this month, researchers at Palo Alto Networks discovered a third variant of the botnet, and it was serving up more than just spam.According to Palo Alto Networks, this new version “includes the ability to sniff user credentials for FTP, POP3, SMTP, and steal .dat files...

CloudCracker, a new service from security researcher Moxie Marlinspike, which expands on the platform developed for WPACracker, offers penetration testers and network auditors a way to run hundreds of millions of words against a given password to test its strength.

Microsoft’s Patch Tuesday is a monthly news event. But new research from Secunia shows that focusing on patching Microsoft vulnerabilities can create a dangerous security blind spot.

Microsoft released fixes for 21 security vulnerabilities as part of this month’s Patch Tuesday.The vulnerabilities are covered in nine separate bulletins, including four that are rated ‘Critical.’ The most serious of the updates is MS12-010, opined Jim Walter, manager of the McAfee Threat Intelligence Service at McAfee Labs. Aimed at Internet Explorer, the update fixes four privately reported vulnerabilities.

AlgoSec has added new features to its flagship security management suite to help organizations leveraging next-generation firewalls.

If you are part of a security team that spends time carefully piecing together and reviewing corporate IT security policies, this may hurt your feelings: According to a new survey jointly commissioned by Xerox and McAfee, more than half of workers don’t always follow or are unaware of their company’s security policies.

Symantec today shared some details on Symantec Control Compliance Suite 11, the next generation of its enterprise-class IT governance, risk and compliance (GRC) solution. The upcoming release features a new Control Compliance Suite Risk Manager module which enables security and risk management teams to better understand and communicate risks to the business environment from their IT infrastructure.

Cooperation in the Undergound Economy 

Reports of yet another significant incident of international corporate espionage surfaced this morning, with the Wall Street Journal reporting that for nearly a decade, hackers had widespread access to the corporate computer network of former telecom giant Nortel Networks Ltd.According to the Wall Street Journal, using just seven passwords taken from Nortel executives, including that of their CEO, the hackers penetrated Nortel's systems at least as far back as 2000.