SecurityWeek

The Department of Energy (DoE) still lacks a department-wide cyber-security incident management system, five years after auditors flagged problems in how the department manages cyber-security incidents.

Anti-Spam vendor Cloudmark recently spotted something new in the world of mobile threats: an Android-based SMS botnet. While the company describes the effort and overall operation of the botnet as primitive, the concern is that this is only the beginning.

RSA today announced expansions to its anti-fraud monitoring and protection grid, with the news that it has opened an Anti Fraud Command Center (AFCC) in West Lafayette, Indiana. The new center is part of a long-standing partnership between RSA and Purdue University.

Antivirus software maker Bitdefender today said that its security software would be integrated into mobile forensic solutions made by Cellebrite, enabling police, military and corporate security professionals to detect malware during mobile forensics examinations.

I use mobile devices every day. I have a smart phone. My household also has four laptops, an iPad and a Kindle Fire. Most professionals I know have at least a smart phone, and many have additional devices. Mobile devices are everywhere.

The Dynamic Nature of Virtualization Security - The need for real-time vulnerability management and risk assessment

Blue Coat Systems on Monday announced its plans to acquire Crossbeam Systems to expand its security and network optimization portfolio.

LOS ANGELES - A US judge jailed a computer hacker for 10 years on Monday for breaking into the email accounts of stars, including Scarlett Johansson, naked pictures of whom were leaked online. A federal judge in Los Angeles also ordered 36-year-old Christopher Chaney, from Florida, to pay a total of $76,000 to Johansson, Christina Aguilera and Renee Olstead, who were among dozens of other people he hacked.

Cloud-based Internet security provider Zscaler on Monday released an early version of HTTPS Everywhere for Internet Explorer, a free tool that forces the Web browser to use HTTPS connection requests whenever possible. ZScaler’s new tool is based on the original HTTPS Everywhere browser extension for Chrome and Firefox developed by The Tor Project and the Electronic Frontier Foundation.

Microsoft fired back at a report of an attack that allows people to track the position of a user's mouse cursor. The situation was publicized by web analytics company Spider.io, which revealed that – using a few lines of JavaScript – hackers can monitor the position of a target's cursor when they are using Internet Explorer. Microsoft and others however have argued that the the firm is exaggerating the threat the situation poses.

A new vulnerability in Exynos 4-powered devices, which include the Samsung’s Galaxy S2 and Galaxy S3 devices, was discovered by a XDA forum developer while recently rooting his Android phone. The flaw affects to both Android tablets and handheld devices running different versions of Android including 2.x, 4.0, and 4.1.

Evidence Indicates that Project Blitzkrieg Would not be a Massive Attack, But Rather a More Selective One Going After Specific Fargets...Security firm McAfee released a report on Thursday confirming the operators behind a massive cyber-fraud campaign against U.S. financial institutions is still moving forward with their plans.

Researchers at Symantec and Kaspersky Lab have confirmed the existence of malware that does nothing more than wipe the drive of the host where it is installed. Circulating in low numbers, the malware, named Batchwiper by Symantec, has only been seen in Iran thus far, but does not appear to be related to Stuxnet, Duqu, or Flame. According to Iran’s CERT, which first reported the threat, the malware wipes files on different drives in various predefined times.

A vulnerability (or unintended function) in WordPress that was dismissed six years ago as a something not worth bothering with, has been given a second glance now that the issue has been exposed to a wider audience. The problem revolves around the pingback function being used as a means to map remote hosts, which can have problematic results for organizations using blogging platform.

It’s no surprise to anyone practicing security today that the threat landscape has grown increasingly complex. Modern attacks weave together exploits, malware, applications and evasions into long, ongoing attacks that can last days, months or even years. To respond, security teams have begun to take a more integrated overall approach to threat prevention in which multiple technologies work together and are evaluated in context of the user and application.