SecurityWeek

ROME - Fidel Castro, Mikhail Gorbachev and Pope Benedict XVI -- Italian Tommasso Debenedetti has killed them all in fake tweets aimed at exposing shoddy journalism that have earned him global notoriety.

Researchers at Symantec say the waterholing attacks utilizing the recently-publicized Internet Explorer zero-day are tied to a gang responsible for a spate of similar kinds of attacks.

NEW DELHI - Iran's top nuclear negotiator on Friday welcomed the return of leading world powers to talks over the country's disputed atomic program, but urged them "not to repeat their past mistakes". Talks stalled in June when Iran rejected a proposal to suspend part of its nuclear programme, asking for more substantial relief from sanctions.

On Thursday, news broke that a fraudulent digital certificate issued for the domain google.com by an intermediate certificate authority (CA) connected to Turkish certificate authority, TURKTRUST had reportedly been seen in active attacks.

A group of chief security and risk officers identified Big Data analytics, cloud computing, enterprise mobility and social media as disruptive innovations transforming enterprise IT. Organizations will need to adapt their information security programs in 2013 to adapt to these changes, they said.

NVIDIA said that it would patch a driver exploit disclosed by a researcher on Christmas Day, which allows an attacker to gain super-user access to any desktop or laptop running the vulnerable software.

On Wednesday, an SQL Injection vulnerability was disclosed that impacts all versions of the Ruby on Rails (a.k.a. Rails) platform. However, despite the fact that the disclosure was given a good deal of attention, which led to unnecessary panic, some experts are downplaying the flaw’s overall severity.

Adobe Systems is planning to release an update coinciding with Microsoft Patch Tuesday to fix critical vulnerabilities affecting Adobe Reader and Acrobat.

The denial-of-service toolkit used against financial institutions late last year has also been used against hosting and energy companies, DDoS protection firm Prolexic said in an advisory Thursday.

Google on Thursday said that late on Christmas Eve, they detected and blocked an unauthorized digital certificate created for the "*.google.com" domain that had been issued by an intermediate certificate authority (CA) which linked back to Turkish certificate authority, TURKTRUST.

Certainly we are no strangers to increased regulations, standards and internal policies, and the resulting audits that impact most organizations – often multiple times per year. While regulations and ensuing IT audits go beyond firewalls and firewall policies, these devices are often a good place to start when it comes to becoming "audit-ready" and gaining continuous visibility of what's going on in your network.

TEHRAN - Iranian forces have carried out what they called cyber warfare tactics for the first time as the Islamic republic's naval units staged manoeuvres in the key Strait of Hormuz, media reports said on Monday. The navy "launched a cyber attack against the computer network of the defensive forces in order to infiltrate the network and hack information or spread virus," the English-language Iran daily reported, quoting Rear Admiral Amir Rastegari.

Cisco remained the leader in the overall security appliance in the third quarter of 2012, according to the latest market numbers from International Data Corporation (IDC). Unified Threat Management appliances accounted for the majority of growth over the quarter.

PARIS - Armed robbers broke into an Apple store in central Paris on New Year's Eve and made off with about one million euros ($1.3 million) in merchandise, police said.The four armed men broke into the shop behind the Palais Garnier Opera around 9:00 pm on Monday, about three hours after it closed.They overpowered an employee, leaving him lightly injured, and loaded the stolen goods into a truck parked near the store.