SecurityWeek

The bot’s name is IP-Killer, also known as MP-DDoser. First documented earlier this year, IP-Killer is purely a DDoS bot, as it cannot capture passwords or deliver spam by the truckload. Active development since its inception in 2011 has turned this specialty code into what Arbor Networks calls a rapidly improving threat, including a revamped and working version of the famed Apache Killer technique.

Oracle has said that it would deliver 14 patches on Tuesday, in order to address serious security problems with the Java platform.“Due to the threat posed by a successful attack, Oracle strongly recommends that customers apply Critical Patch Update fixes as soon as possible,” an advisory states.

Qualys IPO Could Raise Nearly $100 MillionCloud-based security and compliance solutions provider Qualys, Inc., on Friday filed an S-1 registration statement with the U.S. Securities and Exchange Commission, and is set to soon to go public in an IPO that could raise nearly $100 million.

Originally released in English back in March, the 2012 Verizon Data Breach Investigations Report provides a look into some of the best data available on attack trends, and is compiled based on the analysis of more than 850 breaches, and includes data from five law enforcement agencies including the U.S.

Authors Behind Flame Attempt to Cleanup – Issue Kill Command to Infected Systems

It’s been the story of the week; someone dumps a list of more than six million passwords on a Russian forum, and teams of people start cracking them. There are clear indications that they came from LinkedIn, which the social network later confirmed. Shortly after that, dating site eHarmony says they too had accounts compromised by the leak, and now Last.fm is in the mix. Here’s a recap, and a look at the letter LinkedIn is sending to users.

According to a report from Deutsche Presse-Agentur (DPA), German armed forces confirmed the existence of a cyberwarfare unit in a document presented to parliament earlier this week. The defensive side of the military’s cyber group is well-known, but the notice to parliament marks the first time that the offensive aspect has come to light in an official report.The report to legislators from Germany’s Defence Ministry outlines the group’s objectives only briefly.

Proofpoint, a provider of Security-as-a-service solutions, on Thursday announced “Proofpoint Targeted Attack Protection”, a new cloud-based security solution designed to provide protection against spear phishing and other malicious, targeted attacks.

A 39-year-old consultant from California, Michael Garcia, has been found guilty sentenced to fifty-seven months in prison for identity theft. According to the court, Garcia committed his crimes while working as an IT contractor.Garcia was a technical contractor, who offered IT support to various firms within the Stockton area. While employed with a law firm and an accounting firm, he accessed their records and copied the personal information for more than 1,450 people.

Microsoft plans to issue fixes for 25 security vulnerabilities in its upcoming June 2012 Patch Tuesday update.

NQ Enterprise Shield Helps Protect Bring-Your-Own-Devices (BYOD) from Mobile Threats Mobile security software provider NQ Mobile this week announced the official launch of its enterprise mobile security offering, NQ Enterprise Shield.

Research from Trusteer shows that device fingerprinting, which is used in fraud detection systems, might be a useless layer of protection after they discovered a manual for bypassing such features being circulated among online criminals.

Yesterday, SecurityWeek published an early report on a story from Dangens IT that a hashed password list containing some 6.5 million records may have been leaked from LinkedIn. Throughout the morning, several people examining the list of password hashes reported discovering their own credentials in the stolen list.

Organizations Need to Understand The Security Gaps The Mobile Enterprise Presents and Embrace a Combination of Security Tools and Techniques to Bridge these Gaps.

Web performance and security firm, CloudFlare, this week announced launched new services with increased performance and features designed to address the needs of larger businesses.The two new offerings, CloudFlare Business and CloudFlare Enterprise, are built on top of the company’s infrastructure and provide services including broader DDoS Protection, WAN Optimization, content delivery, higher levels of support and more.