SecurityWeek

WASHINGTON - China on Wednesday promised the United States that it would crack down on pirated software as the world's two largest economies looked to ease trade frictions amid political changes.

In a much anticipated move, President Obama on Wednesday issued a national strategy designed to balance the sharing of information with those who need it to keep the country safe, while protecting the same data from those who would use it to cause harm.

WASHINGTON - US regulators unveiled new rules Wednesday aimed at strengthening online privacy protection for children, to reflect the growing use of mobile apps and social networks. The Federal Trade Commission said its updated rules require online services to get consent from parents if they are aimed at children under 13 or know that they are collecting personal information from young children.

Attackers could exploit three Adobe Shockwave flaws to remotely execute code on vulnerable systems, according to three advisories published by US-CERT this week.

The popular Twitter account used to spread hacktivist related news appears to have been suspended by Twitter on Wednesday afternoon, due to violating Twitter’s Terms and Conditions.

Company: Beyond Security  |  Who: Aviram Jenik, CEO

By Using a True Security Zone, Defenders Can Take Initiative Away From the Enemy and Shift the Success of Close Battle in Their Favor.

Last month SecurityWeek reported about the discovery of a malicious module on Linux that was injecting malicious iFrames into websites. This week, researchers from ESET said they have discovered another Linux-based malware variant, one with links to the Sweet Orange exploit kit.

There was a time when if an up and coming criminal wanted to start earning money as a botmaster, the process was time consuming and expensive. According to researchers at Symantec, that isn’t the case these days, as crime kits are getting easier to obtain.

Let He Who is Free of Vulnerabilities Cast the First Exploit.

Voltage Security announced a new tokenization technology to secure sensitive data in a way that reduces the risk of a data breach while still complying with storing the information on disk.

Dell on Tuesday said that it has agreed to acquire Credant Technologies, an Addison, Texas-based provider of data protection solutions, to add security for endpoints, servers, storage and the cloud to its growing security portfolio.

Carberp, a banking fraud Trojan, now has a variant that targets Android devices, researchers have found. Carberp-in-the-mobile, or “Citmo”, is primarily targeting Russian banks and financial institutions in Russian-speaking countries, according to Kaspersky Lab. Citmo joins the ranks of Zeus-in-the-mobile (Zitmos) and SpyEye-in-the-mobile (Spitmos) in targeting SMS messages sent by banks to authenticate online banking transactions.

SAN FRANCISCO - Instagram backed down Tuesday from a planned policy change that appeared to clear the way for the mobile photo sharing service to sell pictures without compensation, after users cried foul. "The language we proposed also raised questions about whether your photos can be part of an advertisement," Instagram co-founder Kevin Systrom said in a blog post.

Oracle has moved to enhance security in an updated version of the Java Development Kit.