SecurityWeek

In mid July, Seculert discovered a new cyber-espionage weapon that was targeting organizations in the Middle East. 

Enterprises Experience 643 “Advanced Malware” Infections Each WeekAccording to FireEye’s most recent threat report released today, organizations are seeing a massive increase in advanced malware that is working its way inside enterprise walls by bypassing traditional IT security defenses.

In my previous SecurityWeek column, I wrote about how information is at the heart of most U.S. bills to secure the Internet. From CISPA to CSA to SECURE IT, all of these bills have one common tactic they are looking to tap: information sharing. My colleagues and I have a more descriptive saying for exactly what this is.

The zero-day in Java that SecurityWeek reported on Monday has gotten worse, as it can be targeted from within the Blackhole Exploit Kit and Metasploit. While this means good guys can use Metasploit as a means to proactive protection, the bad guys now have a way to automate victim collection.

Raynaldo Rivera, a 20 year-old from Tempe, Arizona, surrendered to authorities in Phoenix on Tuesday. Rivera stands accused of being a member of LulzSec and taking part in their attack on Sony last year. If true, he would be the second member of the group arrested in connection to the attack.

VMworld 2012 - HP announced on Tuesday that it would integrated their own portfolio of cloud-based services introduced in April, with VMware’s newest suite, vCloud 5.1. HP’s Converged Cloud enables customers to integrate various combinations of private, managed, and public cloud deployments, in addition to traditional IT, from an offering built on a single open architecture.

FORT MEADE, Maryland - (AFP) - Lawyers for the US soldier charged with passing a trove of classified documents to WikiLeaks accused the military Tuesday of withholding hundreds of emails over fears of a publicity nightmare. The defense team for Private Bradley Manning, who could be jailed for life for "aiding the enemy" over the massive security breach, alleged that more than 1,300 messages were ignored by prosecutors for at least six months.

VMworld 2012 – NetApp has announced a new integration between their Data ONTAP 8 software and VMware’s vSphere 5.1 in order to offer customers the ability to deliver and manage data migration between hundreds of virtual machines at once.

Intel and VMware are partnering to bring more security into the cloud using hardware-based security technologies. The two companies announced this week that VMware's vSphere 5.1 platform will support Intel's Trusted Execution Technology (TXT). The integration will provide a hardened platform for organizations to run their business-critical applications in both private and public clouds.

Radware Discovers “Admin.HLP” - A New Keylogger Used in Targeted Attack Security researchers from Radware have discovered a new Trojan Key Logger named “Admin.HLP” that they say captures sensitive user information and attempts to export it to a server in a remote location.

A new survey from security information and event management vendor Sensage underscores the challenges surrounding security measurements are starting to mount.

Splunk, the recently gone public provider of software that helps organizations gather and make use of machine data from a diverse set of sources, today launched Splunk Storm, a cloud service based on its flagship Splunk software.

As you are likely aware, the number of generic top-level domains (gTLDs) is about to increase dramatically. In June, the Internet Corporation for Assigned Names and Numbers (ICANN) announced that 1,930 applications were filed for New gTLDs (and although six applications were recently withdrawn, that leaves 1,924 applications in play). Domains that might go live in the months and years ahead include .CLOUD, .BUY, .BOOK and .APP, which received 13 separate requests to be delegated as a gTLD.

Hacking group "Team GhostShell" has claimed credit for a massive leak of data, alleged to top more than a million records. However, the breach, while exposing some sensitive information, isn’t as bad as it seems, and it was entirely preventable.

TEHRAN - (AFP) - Iran "will never stop" its controversial uranium enrichment, the country's envoy to the IAEA said on Tuesday, on the sidelines of a Non-Aligned Movement ministerial meeting in Tehran. "Our enrichment activities will never stop and we are justified in carrying them out, and we will continue to do so under IAEA supervision," Ali Asghar Soltanieh told reporters.