SecurityWeek

Over the weekend, the “Chaos Computer Club” (CCC), a group considered to be the largest European Hacker Club, said it had identified and reverse engineered a Windows backdoor trojan that the group claims is being used by the German government.

Security is not a “thing” – it’s a goal and a business enabler that, to be done well, requires a layered approach based on an understanding of risk and an organization’s IT environment.

Kaspersky Lab has released what it declared as the most significant “business related” products it has released in four years. Officially launched on Thursday, Kaspersky Endpoint Security 8 for Windows and Kaspersky Security Center include new multi-layer anti-malware protection, powered by Kaspersky’s intelligence network.

Three unencrypted backup tapes containing sensitive personal data have been reported missing by Nemours, a children's health care services provider.The tapes in question were reported missing from a facility in Wilmington, Delaware on September 8, 2011. The company believes they have been removed around August 10, 2011 during a renovation project.

Baltimore-based data protection vendor SafeNet, said on Friday that it has received baseline approval from the US Government for its new MDeX system.MDeX, or Multi-Domain eXchange, was designed to address cross domain data sharing between government organizations. Earning a Unified Cross Domain Management Office (UCDMO) Cross Domain Inventory, Version 4.0 baseline, means that SafeNet is now free to offer MDeX to departments such as Homeland Security, and other intelligence agencies.

The recent and ongoing Occupying Wall Street rally is an interesting and refreshing exercise in US democracy at its best. Starting out with just 200 protesters in mid-September, the New York City rally has grown to thousands of activists, with similar protests in 30 cities including Chicago, Boston and Denver. Initially scoffed at as being "leaderless" and "directionless", the Occupying Wall Street rally appears to be moving towards focusing on defining such lofty demands as ending the death penalty, ending...

After a relatively quiet Patch Tuesday in September, Microsoft is releasing fixes for 23 separate vulnerabilities in its security update next week.The patches will be spread across eight bulletins – two rated ‘Critical’, six designated ‘Important’ – and will touch Internet Explorer, Microsoft Windows, Microsoft Forefront Unified Access Gateway (UAG), Microsoft Host Integration Server, the .NET Framework and Silverlight.

Developers Leave Debug Tool Open for The World to Use, Including AttackersDevelopers from American Express have made somewhat of a big mistake recently, leaving an administration panel for Web site debugging wide open for anyone to access, providing a potential tool and avenue for attackers to target AMEX customers. (Update: Amex appears to finally have closed access to the admin panel within the past hour, as of 11:15AM EST on Oct 6.)

Before there was concern over VM stall, there was that of VM sprawl.VM sprawl had organizations worrying that so many virtual machines would be spun up (thanks to the ease of deploying them) that not only would management become an issue, but so, too, would performance, security, and IT staffing.

Oracle Public Cloud Brings Customers & Partners Subscription-Based Access to Oracle's Enterprise Applications, Middleware and Database

Often the Real Vulnerability, When it Comes to DNS Security and Stability, is Ignorance. Here are Five DNS Threats You Should Protect Against.

On Wednesday, Check Point released a new blade to its Software Blade Architecture, in order to help organizations prevent and respond to bot-based threats. In addition, the company announced seven other security appliances, promising scalable firewall throughput of up to 100 Gbps.

Update: NetQin Mobile reached out to SecurityWeek to let us know that they had previously identified the same malware under the name AnserverBot on September 19th. Dr. XuXian Jiang, Chief Scientist at NetQin’s US Security Research Center, offers a detailed report on how the malware works. - Editor

According to a recent report from the Government Accountability Office, despite efforts to implement stronger cybersecurity controls, several federal agencies remain in a weakened state. Since 2006, security incident reports have risen over 650-percent.

New Release Helps Protect Sensitive Data, Brings Centralized Management of Enterprise Wide Database Security MeasuresOn Monday at Oracle Open World, Oracle’s giant customer conference taking place this week in San Francisco, Oracle unveiled new and improved database security features in Oracle Enterprise Manager 12c.