SecurityWeek

SAN FRANCISCO - Hewlett-Packard (NYSE:HPQ) called Tuesday for a probe into "willful" financial misstatements by Autonomy, a British software firm it bought for over $10 billion, which HP now says was overvalued. HP's share price tumbled 10.7 percent to $11.87 in midday trade on Wall Street, as the new problems weighed on the US computer giant already struggling with a changing technology landscape.

When the worst happens, and a breach has caused serious damage to your organization, you may be placed into a position where you need to contact law enforcement, perhaps even the FBI. If that happens to be the case, a recent document published by Public Intelligence outlines the things that will help you when the feds have to be called in.

Risk-based Authentication Solution Combats Fraud with Trojan Detection, Mobile Defense, and ATM Transaction Protections

Evaluating All Security Solutions in Full Context, and Focusing On Solutions with Low Operational Impact Are Key For SuccessIt’s a typical scenario in an enterprise. Sam from the security department walks into a meeting and tells everyone, “I’ve got this great new security solution that I am about to buy and need to deploy. It will keep the all the latest malware from infecting anything on our network.”

Last week, someone posted a module to the Full Disclosure mailing list, which turned out to be a rootkit for Linux. Experts examined it, and concluded that if anything, it’s a unique piece of malware, in addition to it being a credible risk to LAMPP deployments.

Symantec today released the latest version of its consumer-focused mobile security offering, Norton Mobile Security. The latest version adds support for iOS devices, the ability to backup contacts, an improved user experience, and helps recover a lost or stolen device and prevent unauthorized user from accessing their data. Norton Mobile Security offers new and improved features including:

Check Point Software Technologies introduced two managed security services as part of the new ThreatCloud Security Services offering to help organizations protect their networks from attacks.

Cisco on Monday announced its plans to spend $1.2 billion to acquire Meraki Inc., a privately held cloud networking technology vendor that caters to midmarket customers with easy-to-deploy and manage networking gear.

Two machines in the FreeBSD.org cluster were compromised in a cyber attack, prompting officials with the open source project to issue a warning to its community members Saturday.

Adequate versus inadequate. The juxtaposed words bring much to mind, but this column is focused on privacy.  In my previous column, I reviewed the hurdles to passing a national data breach notice standard. This week I will answer the question, “Why do Europeans consider Americans inadequate when it comes to privacy?”  I’m not putting words in their mouth.

New Security Council Will Bring Industry Experts Together To Study and Address Online Advertising Security IssuesA new Security Advisory Council specifically focused on online advertising has been formed with the goal of finding ways to combat bots and other security issues that plague the online advertising industry.

Adobe today continued its wave of security updates with a newly released security update for Adobe ColdFusion 10. The hotfix fixes a vulnerability affecting ColdFusion 10 Update 1 and above running on Windows Internet Information Services (IIS), that could result in a Denial of Service condition.

This week, and the week after, plenty of you will do some holiday shopping at the office. Cyber Monday, nothing more than a crafty way for sales and marketing people to bill extra hours, offers huge savings and an equal dose of risk. Here are some things to consider if you’re planning to partake.

On Friday, the PCI Security Standards Council published a set of guidelines for organizations looking to get a handle on risk assessment and threat identification. Specifically, the guidelines relate to section 12.1.2 of the standard, and are drafted to act as a supplement to help businesses discover vulnerabilities and other threats to payment card data.