SecurityWeek

Three of the four most prevalent attack techniques observed were used by LulzSec during their summer hacking rampage.

"If China Wants Your Data, They'll Get It. Just Substitute Any Government You Want (including the U.S.) for China and You Can See Into the Future."

Silver Tail Systems, a provider of fraud prevention solutions for Web sites, this week announced that it has secured funding from Citi Ventures, a unit of Citigroup.

Wave Systems (NASDAQ: WAVX) today announced that it has acquired Safend Ltd., a provider of endpoint data loss protection solutions for approximately $12.8 million, mostly in stock.Safend, headquartered in Tel Aviv, Israel, with offices in Philadelphia, has approximately 70 employees and offers products including port and device control, encryption for removable media, content inspection and discovery.

The FBI said it has arrested a member of the notorious LulzSec hacking group in connection with his role in attacking the computer systems of Sony Pictures Entertainment earlier this year.Cody Kretsinger, 23, of Phoenix, Arizona, was arrested Thursday morning without incident. According to the FBI, a federal grand jury returned an indictment filed under seal in U.S. District Court in Los Angeles September 2 charging him with conspiracy and the unauthorized impairment of a protected computer.

HTTP Request with Modified Header Makes SAP Login Screen Disappear, Researcher SaysSAP environments are often home to an organization’s most important business data, making protecting them paramount for enterprise security.

Solution providers and policy makers from both worlds need to meet up and share ideas, thoughts and experience for the benefit of both.

NetQin Mobile, a Beijing based provider of consumer-centric mobile security solutions, today announced that is has opened a Security Research Center in Raleigh, North Carolina.The Security Research Center will focus specifically on identifying and monitoring mobile security threats that could impact consumers.

Most breaches are not the result of hackers, but rather reflect the increase in the risks of the knowledgeable insider related to identity theft and human error. A majority of health organizations are under-prepared to protect patient privacy and secure data as new uses for digital health information emerge and access to confidential patient information expands, according to a new report released today by PricewaterhouseCoopers.

Security must evolve to better address the new reality of a dynamic and rapidly changing environment. 

Security Resource: Vulnerabilit

Attacks are Persistent, and Hackers have the Advantage. In the Fight Against Cyber Attacks, Knowledge is Power.Being aware of the methods used by hackers is an important step towards defending attacks on sensitive company data. Knowledge determines how a CEO will defend his ship, and whether or not he can prevent future attacks. Understanding hacker “know-how,” in conjunction with appropriate defense and countermeasures, will help identify potential threats to a company’s network.

Half of the Software Piracy Discovered is Being Committed by Existing Customers Who are Out of Compliance with their Licenses. How Can We Fix This?Many software makers ignore or dismiss the piracy of their products based on misperceptions around who is using it and why. However, by tracking the adoption of unlicensed software, your company can turn the age-old piracy problem into revenue generating business unit as well as source data for marketing. Here’s how.

Adobe today said it would release a Flash Player update tomorrow, September 21, 2011. The out of cycle update will address critical security issues in flash player as well as an important universal cross-site scripting issue that is reportedly being exploited in the wild in targeted attacks.Adobe’s Severity Rating System classifies “Critical” security issues as “a vulnerability, which, if exploited would allow malicious native-code to execute, potentially without a user being aware.”

Two security researchers say they have poked holes in the secure sockets layer (SSL) and transport layer security (TLS) protocol with a new tool that enables attackers to decrypt HTTP cookies.