SecurityWeek

A security researcher has developed a proof-of-concept malware capable of remotely accessing smart card readers on Windows machines.

In a muffled and convoluted audio recording, the ex-councilman of the village of Carmelita, Anthony Rhaburn, allegedly tries to convince an employee working for John McAfee to help the government of Belize kill him. The audio recording (embedded at the bottom of this article) is part of a blog post made by McAfee, as the saga of his collapsing world unfolds.

Symantec researchers have discovered a piece of malware that leverages Google Docs to communicate with its command-and-control (C&C) server. The malware is a version of the Makadocs Trojan, which opens a backdoor on the compromised computer and tries to steal information. The latest version of the malware uses Google Docs are a proxy server to reach its C&C.

Just days after NASA warned that a laptop containing unencrypted sensitive employee information was stolen from the space agency, another large organization has come forward and acknowledged a similar incident, also involving a stolen laptop loaded with sensitive personal information, and resulting in many individuals being put at risk.

Defending Against Complex Cyber Attacks Requires a Radical Approach to SecurityBROOKLYN, NY—While security researchers have unraveled many of the mysteries surrounding Stuxnet, Flame, Duqu, and Gauss, experts acknowledge that many secrets remain.

The fortress walls organizations need to build around the data for security are getting larger, and do not stop at the data center.

SAN FRANCISCO - Hewlett-Packard (NYSE:HPQ) called Tuesday for a probe into "willful" financial misstatements by Autonomy, a British software firm it bought for over $10 billion, which HP now says was overvalued. HP's share price tumbled 10.7 percent to $11.87 in midday trade on Wall Street, as the new problems weighed on the US computer giant already struggling with a changing technology landscape.

When the worst happens, and a breach has caused serious damage to your organization, you may be placed into a position where you need to contact law enforcement, perhaps even the FBI. If that happens to be the case, a recent document published by Public Intelligence outlines the things that will help you when the feds have to be called in.

Risk-based Authentication Solution Combats Fraud with Trojan Detection, Mobile Defense, and ATM Transaction Protections

Evaluating All Security Solutions in Full Context, and Focusing On Solutions with Low Operational Impact Are Key For SuccessIt’s a typical scenario in an enterprise. Sam from the security department walks into a meeting and tells everyone, “I’ve got this great new security solution that I am about to buy and need to deploy. It will keep the all the latest malware from infecting anything on our network.”

Last week, someone posted a module to the Full Disclosure mailing list, which turned out to be a rootkit for Linux. Experts examined it, and concluded that if anything, it’s a unique piece of malware, in addition to it being a credible risk to LAMPP deployments.

Symantec today released the latest version of its consumer-focused mobile security offering, Norton Mobile Security. The latest version adds support for iOS devices, the ability to backup contacts, an improved user experience, and helps recover a lost or stolen device and prevent unauthorized user from accessing their data. Norton Mobile Security offers new and improved features including:

Check Point Software Technologies introduced two managed security services as part of the new ThreatCloud Security Services offering to help organizations protect their networks from attacks.

Cisco on Monday announced its plans to spend $1.2 billion to acquire Meraki Inc., a privately held cloud networking technology vendor that caters to midmarket customers with easy-to-deploy and manage networking gear.