SecurityWeek

Microsoft released 13 security bulletins today as part of Patch Tuesday, including two rated “critical” – its highest security rating. But according to some security pros, companies would be wise to not give some of the non-critical bulletins short-thrift when it’s time to prioritize patches.

Weapons Stockpiles of the Future will Include Stashes of Zero-Day Vulnerabilities, Botnets, Control Codes and Sophisticated Malware

After announcing they had defaced Websites belonging to more than 70 different law enforcement agencies across the U.S., hacktivist collective Anonymous, as part of the AntiSec movement, declared in a statement posted online that they had released roughly 10GB of data stolen during the compromise, including “hundreds of private email spools, password information, address and social security numbers, credit card numbers, snitch informa

Hardening your IT Infrastructure has its Rewards

Operation Shady RAT: Peeling Through the LayersNew details have emerged about a stealthy attack campaign that security pros say struck more than 70 organizations around the world.

Facebook Privacy - Steps You Can take to Protect your Privacy While Using the World's Largest Social Networking SiteFacebook is ubiquitous. But it is also anathema to privacy. My daughter tells me that if I am so paranoid about my privacy that I should not have a Facebook account.

As usual, Black Hat USA brought with it a new round of exploits, innovative hacks and offensive and defensive tools.

Security was a key part of the pitch around Chrome OS when Google started revealing details of the operating system back in 2009. Fast forward to August 2011 – Google Chrome OS is a reality on the market and its security is on the menu at the annual Black Hat security conference in Las Vegas.

Enterprise and ICS networks should at least be separated at layer 3, so it’s probably more accurate to say that we’ve routed the air gap, but I didn’t want to give up the double entendre of bridging the gap. Terrible network jokes aside, the simple truth is that digital networking has displaced the air gap, blowing it into the distant places of legend. It is a myth. It does not exist.

Microsoft today announced “BlueHat Prize,” a contest designed to generate new ideas for defensive approaches to support computer security. Microsoft’ goals is to inspire security researchers to develop innovative solutions intended to address serious security threats, and ones that could potentially block entire classes of vulnerabilities.

The specter of advanced persistent threats (APTs) hangs over a growing number of conversations these days about enterprise security, and has prompted businesses to take a closer look at how they can make their environments less vulnerable.

McAfee Reveals Operation Shady RAT“I am convinced that every company in every conceivable industry with significant size and valuable intellectual property and trade secrets has been compromised.” - Dmitri Alperovitch, McAfee

Surrounding the Black Hat Conference set to take place this week in Las Vegas, Veracode, a provider of cloud-based application risk management solutions, today announced Veracode DynamicMP, an on demand solution that combines the power of automated web application vulnerability scanning with the power of cloud computing to provide a scalable vulnerability detection service that can simultaneously test application security across thousands of