SecurityWeek

Fortinet, a provider of network security solutions, today introduced three new appliances to its line of Web application firewalls designed to address the needs of businesses ranging from mid-sized organizations up through large enterprises and service providers.

Security firm Alienvault says that a new variant of the Sykipot family of malware is targeting ActivIdentity’s ActivClient, which is used by the U.S. Department of Defense as a secure means of authentication. Aside from the examination of a sample of the malware itself, it’s unknown what, if any, data the spear-phishing campaign used to launch the attack has made off with.

The back and forth between Israel and a group of Saudi hackers escalated Monday as attacks and threats continue to mount.

It’s almost inevitable that a discussion about industrial control system cyber security will touch on a few touchy topics: the ‘air gap’ myth; the ‘a firewall is good enough’ vs. the ‘you must build an anti-cyber-terrorist über bunker’ security measures; the ‘sharing information helps the community’ vs.

CoverItLive, a live-blogging platform owned by Demand Media, has acknowledged that it has been the victim of a cyber attack and that certain information has been accessed without authorization.CoverItLive describes itself as an enterprise-class live blogging platform designed to handle hundreds of thousands of simultaneous readers, and is used by thousands of outlets to cover events as they happen.

24 Million Customers Potentially Exposed After Attackers Breach Internal Systems at Internet RetailerZappos.Com, best-known for selling shoes and clothing online and its top-notch customer service and corporate culture, appears to be the latest victim of a cyber attack resulting in a data breach.

Denis Maslennikov, a mobile security expert from Kaspersky Lab, has discovered what he says is the first IRC bot for Android he has seen.While he wasn’t able to determine how the file is being propagated, he said that after installation, the malicious Android application disguises itself as "MADDEN NFL 12", a mobile version of the popular NFL football video game.

Researchers at Websense uncovered an effort by spammers to target mobile devices using what are known as quick response codes for URLs.Quick response (QR) codes are a type of matrix barcode that are often used by mobile devices to bring people to a particular URL. The codes can be read by any mobile device with a camera and a QR reader.

As a security guy I sometimes have friends and relatives asking me for professional advice, like “I lost my iPhone, can you help me look for it?” or “How do I delete my browser history, you know, in case my wife checks up on me?” It’s not easy being a technical wizard amongst the masses.

Fresh off news that Splunk has filed for an IPO on Thursday, Netherlands-based AVG Technologies today filed an F-1 Registration Statement with the U.S. Securities and Exchange Commission in connection with a proposed initial public offering (IPO). Similar to an S-1, an F-1 is required by foreign companies looking to sell securities in the United States.

In a talk at the 28th Chaos Communication Congress (28C3) entitled “Smart Hacking For Privacy,” researchers Dario Carluccio and Stephan Brinkhaus described their experiences with smart meters from the German energy provider Discovergy. They said they could guess what’s on your digital TV based on unencrypted signals from the smart meters. They could also spoof the energy usage reported from the meter, a far more serious concern.

The question most asked throughout 2011 was, “is this the year with the most hacks?” There is no straight answer. I think the best way to answer the question is to pose another question.“Why was there more news about hacks, and why would anyone be surprised?”Okay, that’s two questions, but the point is that companies have been working without rest to secure their data. While Internet security technology has improved, companies are slow to catch up. Hackers, on the other...

Sophos has released a new edition to its line of network protection offerings, announcing today that its gateway appliances have been adopted for virtual use. They’ve simplified the pricing, with a fixed cost based per user / per year, making the virtual protection available to any company, of any size.

Threats have evolved. Most security technologies have not. Companies need to look at new, innovative security solutions to effectively combat increasingly sophisticated threats in today’s dynamically changing IT environments.