SecurityWeek

When it comes to letting someone go, very rare will you find a business leader who enjoys that part of the job. When you have to fire a network security administrator, not only is it a downer, it’s a risky proposition – unless you follow basic steps.

Microsoft patched 11 security vulnerabilities today, including a critical bug being targeted by attackers. Microsoft released a total of six security bulletins, including four rated ‘critical.’ The vulnerabilities exist across Microsoft Windows, Microsoft Office, Internet Explorer, Forefront United Access Gateway (UAG) and the .NET Framework.

Security researchers at Kaspersky Lab and Intego have released free tools to help Mac users infected with the Flashback Trojan clean their computers.

Why doesn’t Everyone have Security Intelligence? One of the Reasons is Superstition.“Step on a crack, break your mother’s back.” Not just lyrics by Devo, but an actual superstition. While it’s mostly just practiced by kids who don’t yet know they’re nascent Parkour enthusiasts, you can observe adults today taking that extra half step occasionally to avoid lines in the sidewalk. You may even catch yourself doing it subconsciously.

Mocana MAP 2.0 Helps Secure Apps Running on iOS DevicesSmart device security firm Mocana, today introduced the latest version of its solution designed to help organizations add fine-grained security and usage policies around individual mobile apps with ease.

A new survey of 104 security professionals in the energy sector gave a big thumbs down to smart meter security.

Controversial Domain Registrar Tightens Policy After Reports of Rogue Online Pharmacy LinksRegistrar Internet.bs has changed its domain name registration policy in light of reports criticizing its links to as many as one-third of the rogue pharmacies on the Internet.

On Friday, Palo Alto Networks, the network security firm that has made its mark developing next generation firewalls, filed an S-1 registration statement with the Securities and Exchange Commission for a widely-anticipated initial public offering.

Researchers at NQ Mobile, working alongside researchers at North Carolina State University, have discovered new Android malware that is controlled via SMS that can do a number of things on the compromised device including recording calls and surrounding noise.

Supports of Anonymous targeted the U.K. on Saturday, hitting the websites of the Home Office and the Ministry of Justice. While the attack only lasted a short time, Anonymous has said to expect more of the same as they push forward. Currently, the next target is said to be the GCHQ on April 14.

Utah Department of Health Suffers Data Breach Aimed at Medicaid

Network attacks and breaches have dominated the technical and mainstream news for the past 18 months, as attacks have grown both in volume and significance. Hacktivists used data breaches to embarrass their enemies, nation-states used intrusions to steal secrets and even directly attack infrastructure, and organized crime used breaches for good old-fashioned theft.

GreenSQL, a company that SecurityWeek first met earlier this year during the RSA Conference, recently released the results of a poll that included more than 6,000 customers, IT administrators, DBAs, InfoSec practitioners, and consultants. The results, when focused on information security and database security, show that the majority fear SQL Injection vulnerabilities.

What to Do When Your Website Has Been HackedWhile the following is by no means exhaustive, here are a few suggestions to begin with if your web site has been hacked.

John Kiriakou, a former CIA officer from 1999 to 2004, was indicted on Thursday for allegedly disclosing classified information to journalists. The restricted disclosure included the name of a covert officer and information related to the role a CIA employee played in classified operations.His indictment comes following an investigation that was triggered by what the Department of Justice is calling a “classified defense filing” back in January 2009.