SecurityWeek

A report from network-based security and analytics vendor Kindsight says that 2.2 million home networks were infected with the ZeroAccess botnet in Q3 2012. This infection rate means that advertisers are losing almost one million dollars a day due to click fraud generated by the botnet, the report adds.

Three men were arrested on Monday in the UK for their part in a Phishing scam that targeted various banks. The case marks the first joint effort between the PCeU and SOCA Cyber, as they prepare for full integration next year. The three men, one Nigerian and two Romanian nationals, have been taken to a Central London police station for questioning, after being arrested in a Central London hotel on Monday. They were picked up on charges for Conspiracy to...

The hacker alleged to be behind the Georbot attack against the country of Georgia has been caught on camera, the nation’s CERT has said. The eventual outing of the accused botmaster was the result of Georgia CERT’s work, where they used his own malware against him.

On Tuesday, Israeli data protection firm Porticor released the latest version of its Virtual Private Data (VPD) system. The VPD system is designed to protect data in cloud environments that were previously considered untrusted, and does so while the data is at rest or in use.

A dizzying array of services and products are available to people interested in embarking on the cyber-crime lifestyle. The offerings cover the entire criminal enterprise from getting started, distribution, and monetizing attacks, and aren't all that expensive, according to an analysis of the underground market by Trend Micro.

WASHINGTON - US telecom networks took a hit from superstorm Sandy, which knocked out some emergency call centers in the northeast, the Federal Communications Commission said Tuesday. FCC chairman Julius Genachowski told reporters that a "very small number" of emergency call centers were knocked out in the storm, causing urgent 911 calls to be rerouted, in some cases without the normal location identifiers.

More than 17,000 credit reports have been exposed as a result of attacks at financial institutions and other organizations over the past six years. Attackers grabbed credit reports using stolen login credentials to credit reporting bureaus.

Secunia, a Copenhagen, Denmark-based provider of vulnerability management solutions, has updated its vulnerability management platform to proactively alert organizations of software vulnerabilities so they can hopefully be addressed before infrastructure is compromised.

DKIM, or DomainKeys Identified Mail, is a protocol created to allow mail services to verify the authenticity of the mail messages they deliver.

Storage giant EMC today said that it has signed a definitive agreement to acquire privately held Silver Tail Systems, a provider of web session intelligence and behavioral analytics for fraud and cybercrime detection.

Security firm Imperva has published its hacker intelligence report for October, which is the company’s second report focusing on the activity of one of the Web’s largest hacking forums. In addition to training resources, such as tutorials and scripts, Imperva also detected a market for social networking fraud. “By examining what information hackers seek out or share in these forums, we can better understand where they are focusing their efforts,” said Amichai Shulman, Imperva’s CTO.

A recent study by AT&T and the Polytechnic Institute of New York University (NYU-Poly) has discovered that while a majority of small businesses allow the use of mobile devices (phones and tablets), very few of them are taking any proactive measures when it comes to device security.

Security firm Trend Micro said late Monday that it has obtained samples of the malware that is assumed to be responsible for infecting systems at the Israeli police department and effectively knocking them offline.

A new report from Trend Micro highlights how network traffic can be used to detect advanced persistent threats (APTs) through the correlation of threat intelligence.

According to The Hill, a blog reporting on Congressional activities, the cybersecurity bill that has had a rocky life in Washington is now likely dead. Both sides of the political spectrum are showing little interest in working out the issues.