SecurityWeek

The nation's space agency is facing a data breach after an employee laptop was stolen from a locked car. The incident may finally force the organization to adopt whole disk encryption to protect sensitive data.

Adobe Confirms Breach on Connectusers.com –  Site Taken OfflineAdobe has confirmed claims made by an Egyptian hacker that a database behind Connectusers.com was breached. The company is still investigating, but cached copies of the forum’s source code show a possible explanation as to the cause – outdated forum software.

Tibetan activists are being targeted by a new variant of the Imuler (Revir) Trojan that was originally discovered in September. The attack is launched via email, and uses images of other pro-Tibetan groups as bait in order to encourage the victim into opening files.

LAS VEGAS - Visibility was a commonly heard word at Palo Alto Networks' Ignite conference this week in Las Vegas as customers described the requirements of their network and what they need to enable users to deploy the applications they want without compromising security.

WASHINGTON - The investigation that toppled CIA chief David Petraeus has sparked fresh debate over online privacy and the government's ability to snoop into private email accounts. "When the CIA director cannot hide his activities online, what hope is there for the rest of us?" said Chris Soghoian of the American Civil Liberties Union's Privacy and Technology Project

Just when you start getting comfortable thinking that DDoS or SQL injections are the attack methods that deserve your heavyweight protective measures, another type of vulnerability rears its ugly head larger and louder. Recently it's been cross-site attacks that are on the rise and warrant close scrutiny.

Vormetric, a provider of enterprise encryption and key management solutions, today announced that Alan Kessler has been appointed as the company’s new President and CEO. Kessler comes to Vormetric from HP where he was VP of Worldwide Sales and Service for Enterprise Security Products, and responsible for HP ArcSight, HP TippingPoint, HP Fortify, HP Application Security Center and HP Atalla product lines.

OpenDNS, the company best known for its DNS service that adds a level of security by monitoring domain name requests, has now launched a cloud-based security service to help protect users on iOS devices or Windows or Mac OS-based systems in any location.

Official Requests Up for Web data: In First half of 2012, Google Received 20,938 Requests for Data from Government EntitiesSAN FRANCISCO - Google said Tuesday the number of government requests to hand over data from users or to take down Web content rose in the first six months of 2012, extending a trend of recent years.

Palo Alto Networks is focusing on the virtualized data center to help IT administrators fight off threats targeting virtual environments.

Study Finds That While Application Security Testing Is Expanding to New Industries, The Software Supply Chain Is Still Vulnerable

Alexander Pope’s famous quote “To err is human; to forgive, divine” highlights the common flaw found within all of us – that we make mistakes. While insider risks are a real problem in organizations (whether copying data off unto unencrypted USB drives, clicking on malicious sites/links, etc.), the insiders carrying the greatest risk are the ones with all of the access - administrators. One set of risks is posed by a malicious and/or disgruntled administrator, or compromised administrator accounts.

Employees are becoming more aware of the risks of using personal devices to access corporate resources and are somewhat willing to grant IT some control over their personal devices, according to a recent mobility survey from Blue Coat Systems.

Risk I/O, a vulnerability intelligence platform, announced on Tuesday that it has secured $5.25 million in Series A funding. The money was raised from U.S. Venture Partners, with participation from Tugboat Ventures and Costanoa Venture Capital.

Return Path, an email intelligence and protection firm, announced two new additions to its Fraud Protection Services offerings on Tuesday.