SecurityWeek

The Department of Homeland Security, through its Industrial Control Systems Cyber Emergency Response Team (ICS-CERT), issued a warning last Friday about security vulnerabilities in the Tridium Niagara AX Framework, a popular software platform that integrates various control systems and devices and allows them to be managed over the Internet.The scary part? The security flaws were reported months ago, and permanent a fix has not yet been created.

Cyber-criminals are employing new tactics to circumvent the risk analytics engines used by banks to detect financial fraud, Trusteer researchers found.

Zero-day disclosures, new tools and exploits abound in this year's Black Hat conference in Las Vegas. Next week, the Caesar's Palace hotel in Las Vegas will host the 15th annual gathering of the minds in the world of security known as Black Hat USA.

Armed with an extra $22.4 million in its pocket following a Series C financing round announced just over a week ago, AlienVault, the San Mateo, California-based company behind open source SIEM, OSSIM, and the AlienVault Open Threat Exchange, today announced the latest version of its suite of security management products.

According to Webroot’s Dancho Danchev, a service targeting Russian and Ukrainian users, is offering access to compromised social networking and email accounts.

On Tuesday, Boston-based Rapid7 announced that they have introduced the means to increase vulnerability management efficiency by offering tighter integration between Nexpose and Metasploit.

Ever since the invention of the lock, someone (somewhere) has tried to defeat it, often going to extremely creative lengths to do so. Such is the case of Ray – a security researcher and law enforcement consultant from Germany– who used a 3D printer to generate copies of handcuff keys that are normally restricted to law enforcement; the Bonowi and Chubb.

CipherCloud, a provider of cloud encryption technologies, has launched a cloud encryption gateway for Office 365 that transparently encrypts all email, calendar, and contact data stored in Microsoft's cloud-based Exchange Online and third-party Hosted Exchange services.

Kaspersky Lab and Seculert revealed the presence today of a new cyber-espionage weapon known targeting users in the Middle East. 

Corero Network Security added reputation scanning and IP address blocking to its line of anti-distributed denial of service appliances.

Carnegie Mellon University (CMU), in collaboration with the CERT Program of the Software Engineering Institute (SEI), is launching a new education and certificate program designed for information security executives that will emphasize “strategic cybersecurity management”.

StrikeForce Technologies, TradeHarbor Partner on Three-Factor Authentication Using Voice Verification TechnologyStrikeForce Technologies, a provider of our-of-band authentication and security solutions, will combine voice verification software with its out-of-band authentication platform to create "three-factor" verification for customers increasingly worried about being compromised.

The benefits of using full disk encryption far outweigh the costs of deploying the product, which is more than just the cost of purchasing the software, according to a new study.

Google has expanded its use of address space layout randomization (ASLR) in Android 4.1, AKA Jelly Bean, in a bid to help thwart exploits.