SecurityWeek

Microsoft’s Patch Tuesday is a monthly news event. But new research from Secunia shows that focusing on patching Microsoft vulnerabilities can create a dangerous security blind spot.

Microsoft released fixes for 21 security vulnerabilities as part of this month’s Patch Tuesday.The vulnerabilities are covered in nine separate bulletins, including four that are rated ‘Critical.’ The most serious of the updates is MS12-010, opined Jim Walter, manager of the McAfee Threat Intelligence Service at McAfee Labs. Aimed at Internet Explorer, the update fixes four privately reported vulnerabilities.

AlgoSec has added new features to its flagship security management suite to help organizations leveraging next-generation firewalls.

If you are part of a security team that spends time carefully piecing together and reviewing corporate IT security policies, this may hurt your feelings: According to a new survey jointly commissioned by Xerox and McAfee, more than half of workers don’t always follow or are unaware of their company’s security policies.

Symantec today shared some details on Symantec Control Compliance Suite 11, the next generation of its enterprise-class IT governance, risk and compliance (GRC) solution. The upcoming release features a new Control Compliance Suite Risk Manager module which enables security and risk management teams to better understand and communicate risks to the business environment from their IT infrastructure.

Cooperation in the Undergound Economy 

Reports of yet another significant incident of international corporate espionage surfaced this morning, with the Wall Street Journal reporting that for nearly a decade, hackers had widespread access to the corporate computer network of former telecom giant Nortel Networks Ltd.According to the Wall Street Journal, using just seven passwords taken from Nortel executives, including that of their CEO, the hackers penetrated Nortel's systems at least as far back as 2000. 

Blue Coat Systems, a provider of Web security and WAN optimization solutions, on Monday said that its shareholders voted to approve the acquisition entered into in December 2011 between Blue Coat and an investor group led by private equity investment firm Thoma Bravo, LLC.

In response to the rapid adoption of virtualization technology by organizations from around the globe, Kaspersky Lab today announced a solution built from the ground-up to protect evolving corporate IT infrastructures from the ever-growing threat of malware.

Late Sunday reports emerged that Microsoft’s online store in India had been hacked, defaced and user information exposed including unencrypted passwords. It turns out these claims are true and while Microsoft isn’t saying much on the subject, they did comment on the issue.

Whistleblower site Cryptome has been hacked and infected by the Blackhole exploit kit.Just how the breach occurred has not been said. Cryptome co-founder John Young however told SecurityWeek that the site is in the process of cleaning everything up, and that process should be finished by the end of the day.“It appears every HTML page was infected so we are replacing all the pages to be sure,” he said.

In November 2011, the Steam gaming platform, in addition to user forums where gaming fans gather to discuss various gaming topics, said that intruders obtained access to its Steam database in addition to the defacing the forums.

ADT Business Solutions today announced the next generation of its Anti-Skim™ ATM Security solution to help protect banks and their customers from the rising threat of ATM skimming. ADT’s new anti-skimming technology offers multilayered security to help protect ATM customers from this blend of electronic crime and cyber-fraud.Installed inside the ATM, the company says the enhanced Anti-Skim ATM Security kit features technology that works on all major ATM makes and models.

Over the weekend, Google addressed two separate security issues within Google Wallet, one which takes some skill and knowledge to exploit, and one that anyone searching the lost and found box can exploit - assuming they are aware of it.

There are Tons of Applications and Code out there that are not Overtly Malicious, yet do Spyware-like Things Without the user’s Knowledge and Reduce the Security Posture of the Client Machine.