SecurityWeek

On Tuesday, Oracle released its Critical Patch Update for October 2011 which brought a total of 57 security vulnerability fixes across multiple Oracle products.

The marriage of McAfee and Intel has produced some well-publicized announcements of late. First there was DeepSAFE; now there’s Deep Defender, new security software that McAfee execs are touting as a game-changer in the fight against malware.

Internet security firm Webroot, today announced that Jacques Erasmus has been appointed chief information security officer for the Broomfield, Colorado based company.As Webroot’s first CISO, Erasmus will oversee data security operations across the business, including development, implementation and compliance.

On Monday, Google launched "Good To Know", a privacy campaign aimed at giving people practical advise when it comes to staying safe online. The new effort covers a wide range of topics and done with the help of the Citizens Advice Bureau in the UK.

Flashback Trojan Attempts to Disable Apple's XProtect

You've Been Hacked. What's Your Response Plan?It’s 3:10 a.m. and your home phone rings.The assistant security specialist in your global company is sorry to wake you but it couldn’t wait. You open your eyes and you already know: he has spotted what he is calling “highly” suspicious activity over the company network. Although they are working on the problem, the situation is expected to get worse. You get dressed and go to the office.

This past year or so has been a rough one for certificate authorities. From the attacks on DigiNotar and Comodo to malware such as Stuxnet and Zeus that used signed digital certificates in their assaults on vulnerable systems.

A Chinese national pleaded guilty today to one count of economic espionage to benefit a university tied to the People’s Republic of China and one count of theft of trade secrets.

McAfee Releases Endpoint Security Built on DeepSAFE Technology Co-Developed by McAfee and IntelMcAfee today announced “McAfee Deep Defender” the company’s next generation endpoint security solution that brings enhanced detection capabilities allowing it to detect kernel-mode malware.

Details Emerge on "Duqu" a Possible Precursor to the Next StuxnetSymantec researchers shared details today on what they say could be the precursor to a future Stuxnet-like attack. Symantec said they were tipped off about the threat on October 13th by a research lab “with strong international connections.”The threat has been named "Duqu" [dyü-kyü], simply because it creates files with the file name prefix “~DQ”.

The U.S.’s largest mobile carrier is alerting customers to a privacy policy change implemented last month, which enrolled all customers into a data collection program. In short, Verizon is collecting usage and location data, with plans to sell it.

Mocana, a San Francisco based company that focuses on mobile and smart device security solutions, today announced a new software solution designed to help enterprises manage and secure mobile devices and apps on their networks.The new solution, “Mobile App Protection”, or MAP, complements existing mobile device management (MDM) solutions that may be in place, but goes beyond app sandboxes, SDKs, containers, and hypervisor technologies that other mobile solutions typically utilize.

According to data coming from Lieberman Software, passwords are still a problem in the enterprise, including apathy from senior management, and password related chaos from IT staff.

On Tuesday, Rapid7 released a free version of its commercial offering to the Metasploit Framework. This new Community Edition, rests on top of the framework many security professionals have grown to love over the years, but includes the easy to use interface and some basic features from the Metasploit Pro line.