SecurityWeek

Los Alamos National Lab, one of two labs in the nation responsible for nuclear research, has replaced networking equipment out of concerns over security. The concerns stem from the fact that the networking switches were created by China-based HC3 Technologies.

Ruby on Rails maintainers have released another critical update to the popular Web application framework to address some serious issues.

According to a report from the New York Times, Iran is to blame for a wave of DDoS attacks against several U.S. banks this summer. This nation-state attack was previously thought to be the work of a small band of hackers, but government officials and security researchers are now voicing their doubts.

After pleading guilty last September, the US Department of Justice said on Tuesday that Cezar Butu, of Ploiesti, Romania, has been sentenced to 21-months in prison for his admitted role in a Web-based scam targeting payment card data.

As a privacy attorney and General Counsel of security companies, I have had the privilege of listening to the humorous ways in which colleagues convince themselves they have more privacy in the workplace than they actually do.

BRUSSELS - In a bid to seize the initiative from increasingly sophisticated online criminals, the European Union unveiled a new cybercrime center Wednesday. Criminal gangs are using new technology to steal identities, empty bank accounts or profit from child sex abuse, and only a centralised system can combat them, EU Home Affairs Commissioner Cecilia Malmstroem said.

Mobile security and device management provider AirWatch has launched a standalone platform to handle mobile devices and apps in bring-your-own-device (BYOD) environments.

LONDON - The British military's dependence on information technology means it could be "fatally compromised" by a cyber-attack but the government seems unprepared for such an event, lawmakers warned Wednesday.

SEOUL - What is one of the world's most prominent advocates of Internet freedom doing in a country where unregulated access to information is generally either impossible or criminal?

Cloud-based web security and infrastructure provider Incapsula says they identified a botnet that they believe was used distributed denial of service (DDoS) attacks against US-financial institutions last year.

WASHINGTON - A Chinese man pleaded guilty in a US federal court to pirating software that investigators said was worth more than $100 million, the US said Tuesday.

A security researcher has uncovered two zero-day vulnerabilities in Symantec's desktop encryption product. One of the security issues could potentially be used to trigger the other flaw, he claims.

Yahoo said it has closed a cross-site scripting vulnerability a researcher said left Yahoo Mail users susceptible to having their accounts hijacked – though a security firm is disputing that claim.

Microsoft released seven security bulletins today in its first Patch Tuesday update of the year. Two of the seven bulletins are rated 'critical', the highest security rating for Microsoft, while others are classified as 'Important'.  Of the critical bulletins, the first addresses a vulnerability that exists in the way Microsoft Windows Print Spooler handles specially-crafted print jobs. If exploited, an attacker could corrupt memory in such a way that an attacker could execute arbitrary code.

The European Network and Information Security Agency (ENISA), Europe’s cyber security agency, on Tuesday released a threat landscape report that provides an overview of current threats, threat agents and threat trends.