SecurityWeek

UPDATE: Not too long ago, Microsoft and other security researchers were heralding the fall of the Kelihos botnet. It appears now however that whoever is behind the malware may still be in business.

Find out about the potential financial benefits from Forrester's Total Economic Impact Study showing an ROI of up to 152% from deploying Symantec Protection Suite

Researchers at M86 Security say hackers have compromised hundreds of Web sites that use Wordpress as part of an attack campaign using the Phoenix exploit kit.“A few days ago, hundreds of websites, based on WordPress 3.2.1, were compromised,” blogged Daniel Chechik, security researcher at M86 Security. “The attacker uploaded an HTML page to the standard Uploads folder and that page redirects the user to the Phoenix Exploit Kit. Its logs show that users from at least four hundred compromised sites...

Experts Say The Government and the Private Sector Need to Work Together Better, Faster and Across More Sectors.There has been a growing awareness during the past few years that cyber-security is an important element of military defense – a fact that was underscored by recent research from McAfee and Brussels-based think tank Security & Defence Agenda (SDA).

Attackers Target Patched Windows Media Player Vulnerability Attackers are going after a recently patched vulnerability in Windows Media Player (WMP), and users do not seem to be keeping up with the threat.

McAfee has announced McAfee Mobile Security 2.0, confirming the software’s presence in the Android Market last week, which appeared out of the blue to some users. The update is a step forward for overall resource usage and cosmetic improvements, but the base functionality remains the same.

Solera Networks, a provider of network forensics and network monitoring solutions, announced today that it has secured $20 million in Series D financing lead by Intel Capital.

Rival Claims "Malware" in Question is an Aggressive Form of an Ad Network – Not Malware.

Organizations Unite to Combat Email Phishing through DMARC.orgFifteen companies, including PayPal, Google, Facebook, and Microsoft, have united to launch DMARC, a blueprint for a global counter attack on phishing, and a way to improve coordination between email providers and mail sender domain owners to combat spam.

The U.S. Securities and Exchange Commission (SEC) has charged a trader and four firms for what it calls a “brazen and systematic scheme”, which involved more than $850,000 in ill-gotten funds, and more than $2 million in customer compensation.

The Financial Industry Regulatory Authority (FINRA), the largest independent regulator for all securities firms doing business in the United States, has issued an investor alert and a regulatory notice about an increase in financially motivated attacks, targeting the email accounts used by investors to initiate transactions. Similar warnings were recently issued by the FBI and the Financial Services Information Sharing and Analysis Center (FS-ISAC).

Who doesn’t love Zappos? They are one of the friendliest Internet stores in the US. Zappos started in 1999 by Nick Swinmurn, a truly great guy, who grew the company to $1 billion in sales by 2008.It has been a few years, but I still remember those giant boxes of Zappos shoes my wife and daughter would order – lots of styles in several sizes each. The shoe ceremony would take an hour, with all but two, maybe three pair...

Symantec has found itself in the unusual position of having to warn users about its own software.

State of the art teleconferencing equipment is a must for most organizations today but few have installed it correctly, according to researchers at Rapid 7. The security company reported on Monday that conference boardrooms around the world were vulnerable to hacking. H.D.

The domain of UFC.com and two owned by luxury designer firm Coach, were targeted this week for their continued support of the anti-piracy and anti-counterfeiting bills - SOPA and PIPA. In each case, the group calling itself UGNazi, hijacked the DNS used by the targeted domains, redirecting the visitors to a secondary location.