SecurityWeek

Kaspersky Lab Researchers Say Parts of Duqu Are Written in an Unknown Programming Language, Uses Asynchronous Commutations

Google showed a great deal of confidence ahead of the CanSecWest conference this year when it announced plans to offer up to $1 million in rewards for a successful exploit against its Chrome browser. The company even launched its own Pwnium contest.

The National Security Agency/Central Security Service officially opened its new "Georgia Cryptologic Center" this week. Celebrated with a ribbon-cutting ceremony on Monday, the new $286 million, 604,000 square foot complex will provide cryptologic professionals with the latest state-of-the-art tools to conduct signals intelligence operations, train the cryptologic workforce, and enable global communications.

After news of the FBI’s arrest of LulzSec’s leader Sabu became public, including the fact he was a cooperating witness in an ongoing criminal investigation, Panda Labs published a blog post titled “Where is the lulz now?” Not long after that post was made, AntiSec supporters attacked Panda Security, defacing more than 30 sub-domains used by the company.

I have a confession to make: Like many security professionals, I have a love-hate relationship with Governance, Risk Management and Regulatory Compliance (GRC).

Trend Micro today announced that it has hired Tom Kellermann for a newly created position in the company, U.S. Vice President of Cybersecurity.

A Hands-on, First Look at Dome9 Security’s LiteCloud Automated Cloud Security Firewall Management Service

Defending Against Insider Threats in SCADA Environments Using Context and Correlation[Read Previous Column: "SCADA Mischief Episode 1: A Picture is Worth a Thousand Worms" Before Reading This Column]

Top members alleged to be part of the hacking group LulzSec were charged today in a sweeping operation that spanned the globe.

Defending Against DDoS Attacks: Do You Have an Action Plan in Place?In my career I have been asked how to respond to a DDoS attack. What do you do? Who do you call? Ghost Busters? What are the options?

Trustwave, a provider of cloud-based compliance and information security solutions, today announced that it has signed a definitive agreement to acquire Irvine, California-based M86 Security, a provider of Web security and anti-malware solutions.

McAfee has published a paper detailing an attack on the Apple iPad to highlight the challenges facing mobile device security.

Tacoma, Washington-based IID (Internet Identity), a provider of Internet security technology and services, today said that it has seen a dramatic decrease in Fortune 500 companies and what it considers “major” U.S. federal agencies that are infected with DNSChanger malicious malware.

Electromagnetic emissions coming off your mobile device may be leaking cryptographic information, according to research by Cryptography Research, Inc (CRI).

The human element. It’s something information security professionals lose sleep over and just can’t seem to get under control. But the threat from smartphone carrying, click-happy, and “helpful” (think social engineering) employees to an organization's security posture is not new to any CISO or IT Security professional.