SecurityWeek

Case Study Exposed Name of Utility Company Hit By Massive DDoS Attack in February

Last week at the RSA Conference, nCircle surveyed 205 people about their thoughts on various security measures and their effectiveness against state-sponsored attacks. The survey focused on endpoint protections and perimeter defenses.

Java, as it stands as a development platform, has had a terrible week in the news due to security issues. The problems keep mounting however, as a researcher has discovered an applet signed with a stolen certificate being used to spread malware, helped by Java’s own default security settings.

According to a new report from application security firm Cenzic, Web application vulnerabilities remain an issue, as 99% of the applications they tested were vulnerable to one degree or another, with the average application having 13 vulnerabilities on its own.

Researchers have uncovered intriguing clues hinting that the recent fake Mandiant report has a China connection.

Ryan Naraine talks to Vupen CEO Chaouki Bekrar about the controversies surrounding the sale of zero-day vulnerabilities and exploits, his company’s business dealings and the work that goes into winning the CanSecWest P

After less than a six-week hiatus, attackers have resumed their distributed-denial of service attacks against U.S. financial institutions.

Advanced Threat Protection & Visibility Series – Part 1: Advanced Threats and Nation States

During the RSA Conference last week, some attendees visting the F5 Networks booth took part in a quick survey in order to determine what security trends have the greatest impact on their organization’s ability to reach their security desires. The results show that many of them are still struggling.

With millions of dollars on the line, Google took the smart money this week and patched Chrome ahead of today’s Pwn2Own and Pwnium competitions at the CanSecWest conference taking place this week in Vancouver.

WASHINGTON - Facebook users began sharing more private data after the social network giant revamped its policies and interface, according to a study released Tuesday.

A new study by CA Technologies and Ponemon Institute shows that many companies are more confident about security in the cloud, but that the forecast is far from sunny.

Researchers at BitDefender have found a new version of the MiniDuke malware that has been operating for at least 21 months.

Researchers from Kaspersky Lab have discovered “AlbaBotnet”, an emerging botnet that appears to be gearing up to inflict financial damage on accounts at banks in Chili.According to Kaspersky researchers, AlbaBotnet focuses on utilizing targeted phishing attacks designed to steal online accounts details, currently at two major Chilean banks.

A vulnerability patched in February by Oracle has been added to the Blackhole Exploit Kit, researchers have discovered. This wouldn’t normally be a headline event in and of itself, but most people seem to ignore Java once installed, and are vulnerable to dozens of attacks thinks to kits like this and the number of issues in the Java codebase.