SecurityWeek

Report Indicates Many Organizations Not Adequately Prepared for Persistent APT Onslaught

Saying you’re secure is one thing; having the metrics to prove it is another, particularly when it comes to justifying security budgets.Having metrics to focus on can make these conversations easier, security pros say.

Typosquatting is no longer a risk to be delegated entirely to brand managers in the legal and marketing departments.

Check Point Software Technologies is set to acquire governance, risk management and compliance (GRC) vendor Dynasec to help customers handle regulatory requirements.According to Check Point, the buy will bolster 3D Security, Check Point’s vision for combining policies, people and enforcement in the name of security. The financial terms of the deal are not being made public. However, Check Point did give hints regarding its plans for the new acquisition.

It won’t be long before attackers discover that your home automation system is connected to everything.

Internet security firm Bitdefender announced the availability of its new cloud-based endpoint security offering this week.Designed to deliver the benefits of an on-premise enterprise security solution, “Cloud Security for Endpoints by Bitdefender” is built to provide a simple and flexible solution to protect end-user systems and servers without the overhead of additional software, hardware and IT staff.

At Least 48 Companies Targeted in Cyber Attacks Across Several IndustriesAttackers have been targeting chemical and defense companies around the world in a cyber-campaign designed to steal information.

Rush for New Technology Often Makes Security an After-Thought, Putting Organizations at RiskAccording to Ernst & Young’s just-released 2011 Global Information Security, organizations are rushing to adopt new technologies including cloud computing, tablets and social media, but are often leaving security as an after-thought.

Researchers at Symantec have uncovered a way to fool Facebook users into defeating the social network’s defense against cross-site request forgery attacks.

After one of their own was kidnapped while participating in Operation PaperStorm, Anonymous has threatened to expose the Zetas drug cartel unless the Anon is released. The comments, made in a video posted to YouTube, inform the Zetas family that they’ve made a huge mistake with the kidnapping, and give them until Saturday to respond.

Visibility and Control over as Much Network Traffic as Possible will Leave Malware with Fewer Places to Hide.

In Mumbai, Indian authorities seized components from servers in a data center, after Symantec informed them that they were communicating with the command and control (C&C) infrastructure used by Duqu, the Trojan that is touted as the precursor to the next Stuxnet. However, experts are now saying that the connection between the two malicious programs is questionable.

Initiative Will Focus on Creating Cyber Education Programs for K-12 through Career and Technical Education Levels.The National Cyber Security Alliance (NCSA), acting on behalf of the National Cybersecurity Education Council, has signed a memorandum of understanding with the US Dept. of Education (DOE), to establish cybersecurity related training programs in schools across the nation, grades K-12.

Balancing Risk and Reward in Information Security: Are you Willing to Spend X to Avoid Y?My daughters tell me that I am too careful and I over-think decisions. I research a car before buying, and build a spreadsheet that includes things like warranties and total cost of ownership for a year. I think, however, that I am just practical.

Red Hat today announced that it has joined Facebook’s Open Compute Project, a non-profit foundation with a simple, yet challenging goal – design the most efficient computing infrastructures at the lowest possible cost.With this goal in mind, Red Hat is now part of the ecosystem of engineers, architects and developers that are looking to redefine the next-generation datacenter. As the largest provider of open source software and services, this is a huge addition of support to the project.