SecurityWeek

Oracle has released new commercial extensions for MySQL Enterprise during the inaugural MySQL Connect conference, which took place during the Oracle OpenWorld conference in San Francisco. The extensions focus on security and availability, and are available for MySQL Enterprise and MySQL Cluster CGE.

“Ma and Pop sleep with door unlocked” LOUISVILLE - DerbyCon - Saturday afternoon, SecurityWeek sat down with Ryan Sevey, an information security consultant for a utility company, who gave a talk at DerbyCon on security solutions for Small and Mid-Size Businesses (SMBs), with a focus on “Mom and Pop” operations.

LOUISVILLE - DerbyCon – Day two of DerbyCon, which is the only full day of the event (9:00 a.m. – 7:00 p.m.), is taking place in the downtown area of a foggy and overcast Louisville, Kentucky. The weather is the only thing gloomy, as attendees were up early and moving around the conference, despite the fact that many of them (your faithful scribe included) are running on very little sleep.

WASHINGTON - For students seeking to become cyber warriors, the US government has a sweet deal. Full tuition, expenses and a stipend will be paid at any of dozens of universities for students to get specialized cybersecurity training, in exchange for an equal number of years working for a federal agency.

MANILA - A new cybercrime law in the Philippines that could see people sentenced to 12 years in jail for posting defamatory comments on Facebook or Twitter is generating outrage among netizens and rights groups.

V-Key, a Redwood City, California-based startup that makes mobile middleware to help protect mobile applications from threats, this week announced that it has secured $4 million in funding. According to the company, the new cash will be used to fuel research and development in mobile applications security and intelligence technology, and to expand the company’s sales and support operations in the United States and Asia Pacific.

LOUISVILLE - DerbyCon – During his talk on Friday, Rapid7’s HD Moore presented findings to attendees of DerbyCon, which are the result of his research and efforts to map the Internet. He focused on what he calls the “funky little ghost towns” that emerge and the trends that are reviled when one does large-scale mapping on the Internet.

An Estimated 1,700 people arrived in Louisville, Kentucky on Friday for DerbyCon, a weekend filled with training, technical discussions, and fine Kentucky bourbon. This year will be the second time DerbyCon has taken place, hence the conference’s theme of “The Reunion”. If the mood from the attendees is anything to go by, things are off to a great start.

Change is the norm for most security teams, as evolving business requirements as well as new threats dictate new or modified policies and tools. But security change management is handled poorly by most organizations. In some cases, it is “just” inefficient and slow, further contributing to the security department’s reputation of interfering with the business. In other cases it is error-prone, exposing the organization to risks from changes that were executed incorrectly or even causing network outages that can damage...

As I wander the world of website security, I run across many reasons why most websites (over 70%) are open to hacks from amateur and professional hackers alike. These reasons range from poor development practices to aging websites built in a day when security was not a priority. And website security isn’t getting any better – new websites are just as insecure.

In the first big security industry IPO since Palo Alto Networks made its debut as a public company back in July, Cloud-based security and compliance solutions provider Qualys, is set to go public and start trading on the NASDAQ exchange on Friday.

Security firm Prolexic Technologies released a whitepaper today aimed at helping organizations use their firewalls more effectively to fight distributed denial-of-service (DDoS) attacks.

Hackers Breached An Adobe Server To Gain Access To Code Signing InfrastructureAdobe will be revoking a code signing certificate next week after discovering two pieces of malware that had been digitally signed with Adobe's credentials.

A new study by NSS Labs found Microsoft Internet Explorer outstripped the competition when it came to protecting users from socially-engineered malware. Google Chrome was a distant second, and performed dismally when blocking click-fraud malware, the research and testing company said.

Nominum’s New Platform Is Designed To Help Network Operators Make Their Networks Safer and More Efficient