SecurityWeek

Radware on Tuesday announced its fastest attack mitigation solution yet, the DefensePro x420. The x420 is an upgrade to their DefensePro offering, and is designed to help customers withstand sustained DDoS attacks.

While mobile malware remains small next to the amount affecting PCs, it is still growing, and new reports from Kaspersky Lab and F-Secure show where attackers are focusing their attention. A new report by Kaspersky Lab found that 28 percent of all mobile devices attacked by malware in the third quarter of 2012 were running "Gingerbread" - aka Android OS version 2.3.6.

A colleague of mine has strict ideas about how he manages the security of his assets, both information and physical. He has two bank accounts, one in which he only keeps around $1,000 at any given time, and he uses it for online banking. The account has automatic overdraft declined and is tied to his PayPal account. The other account, kept at a separate banking institution, is where he keeps the majority of his free cash. It has overdraft protection,...

After an attacker recently leaked the source code for VMware's ESX Server online, VMware downplayed the significance of the breach, saying the stolen code was outdated.

On Tuesday, Adobe issued updates to Flash Player for Windows, Mac, and Linux in order to address seven recently identified security vulnerabilities. According to Adobe, the issues patched this week could allow an attacker to execute code, or at the least trigger a system crash. The patches address five buffer overflow vulnerabilities, a memory corruption vulnerability, and a security bypass issue.

A group of activist hackers calling themselves NullCrew have targeted the UK’s Ministry of Defence (MOD), and used a simple SQL Injection attack to plunder thousands of email addresses and passwords. According to the NullCrew disclosure, the MOD’s webmaster made a terrible mistake, as the group was able to life more than 3,000 email address and password combinations from a database by using an “easy as [expletive] SQL Injection.”

Threat researchers from malware protection firm FireEye have discovered a new type of malware on systems that have been infected with the Gh0st RAT (Remote Access Trojan), with plenty of evidence that suggests that the botmasters for Gh0st are experimenting with new tools.

Officials at Coca-Cola reportedly hid the fact that the company was victimized in a breach in 2009. According to Bloomberg News, the FBI approached the company when it learned hackers had stolen sensitive files about the company's $2.4 billion acquisition of China Huiyuan Juice Group, which eventually collapsed. The compromise was reportedly occurred via emails with malicious links that were sent to company executives.

Mozilla has added a list of sites to its Firefox browser that can only be connected to via secure conenctions to improve security.

WASHINGTON - New Jersey's decision to allow voters displaced by superstorm Sandy to cast ballots by email has prompted a flood of warnings over security, secrecy and a potential for legal entanglements. State officials in New Jersey announced the plan Saturday, saying it could help victims of the unprecedented storm along with rescuers who may also be unable to get to polling places.

Its no secret that modern data centers are in the midst of an ongoing period of very dynamic evolution that has fundamentally changed the speed and efficiency of enterprise computing.

Rumors circulated early on Monday that Anonymous has kicked off their OpVendetta campaign with a hack on PayPal. While this hasn’t been confirmed, other related defacements and server compromises have been linked to the operation, as the faceless legion aims to make people remember the 5th of November. [Updated With Additonal Statements from PayPal Below]

With Halloween past us, there’s an excess of sugar in our blood, and remnant imaginings of monsters under the bed. So perhaps that’s why when the topic of “silver bullet security” recently came up, my mind immediately went to Werewolves. The term was used, as it often is, in a discussion about Application Whitelisting—the industrial automation industry’s rightful poster child for endpoint security.

Malware protection firm FireEye has teamed up with EMC’s RSA Security division through a new interoperability agreement that will leverage threat information from FireEye’s Malware Protection System (MPS) and feed that data into RSA’s NetWitness network monitoring platform.

Hundreds of webpages maintained by NBC Universal were defaced over the weekend, by a hacker going by the name of “pyknik.” In addition to NBC, this attacker also targeted a Lady Gaga fan site. Web software used by both domains is speculated to be the primary source of access used in the attack.