SecurityWeek

Gauss: "Nation-state cyber-surveillance meets banking Trojan"Researchers at Kaspersky Lab have uncovered what they believe is another nation-state sponsored cyber-espionage toolkit designed to steal data from individuals in the Middle East.

Responding to a CA Compromise - Is Your Organization Prepared?In last month’s Information Technology Laboratory (ITL) Bulletin, the National Institute on Standards and Technology (NIST) focused on offering guidance for incident response teams dealing with the aftermath of a Certificate Authority (CA) breach, an issue that is worth examining if your organization uses PKI in any capacity.

When Upgrading to an IPv6-enabled Version of a Security Solution, Be Sure It Can Deliver the Same Effectiveness and Performance as IPv4 Versions. 

Akamai Technologies has released its State of the Internet report for the first quarter of 2012, based on data collected from its massive global network. While Akamai observed attack traffic originating from 182 unique countries, the highest level of observed attacks originated in the Asia-Pacific region over the quarter, the report found.

Refusing to buckle to the pressure put on them by industry insiders and the competition, Microsoft said on Tuesday that Do Not Track (DNT) will be a default option for Internet Explorer 10. As was the case when SecurityWeek last reported on the issue, Microsoft maintains that the choice reflects their desire to protect the privacy of the end user.

Researchers have uncovered another attack exploiting a Java vulnerability against activists and government agencies in Nepal. The attack resulted in a backdoor being installed on victims' machines.

There are signs that the FinFisher "lawful interception" spyware may be installed on command-and-control computers in at least ten different countries, including the United States, according new research from Rapid7.

Hackers’ Investment in Evasion Techniques Proves That They See Web Applications as a Valuable Attack Surface

The number of malicious websites identified by Symantec has inched upward in the past month to 2,189 websites per day, according to the company's latest intelligence report.

After a journalist for Wired had his digital life wiped away, and his coverage on the topic exposed how their customer service and user experience policies can be exploited for malicious gain, Apple and Amazon have adopted new policies for account access.

Hot News: Anonymous Targets Australian Spy Agency

BotoPedia, a site similar to Wikipedia, but focusing on bots (both good and bad), made its debut today. It’s the brainchild of Incapsula, a cloud-based website security and performance service, and they’re hoping it will serve as a useful resource for organizations who need help developing Web-based policies.

Trend Micro Adds Big Data Capabilities to its “Smart Protection Network” for Enhanced Cloud, Mobile and Targeted Attack ProtectionTrend Micro has expanded its cloud-based security infrastructure with big data analytics to collect actionable intelligence about the latest threats.

One of the central figures believed to have been behind the Mariposa botnet is on trial in Slovenia. The suspected mastermind of the botnet, Matjaž Škorjanc, 26, is believed by the authorities to be the hacker known as "Iserdo." Authorities arrested him in Slovenia arrested in 2010. At its height, Mariposa was composed of more than 8 million zombie computers infected with the Butterfly bot (Mariposa is Spanish for butterfly). 

Security researchers have identified new Zeus malware samples targeting Android and BlackBerry devices.