SecurityWeek

What motivates an organization to secure data? For one, there is the cost or impact of a breach, which spans from the losses the business incurs while resources are shut down to investigate the attack to the potential damage to a company’s brand. Not all retailers, however, find the prospect of a hefty price tag reason enough to invest in securing customer data (emails, addresses, identification numbers, credit card numbers, etc.). Luckily for consumers, there is an even more compelling...

Today, Skype released a new version of the Skype for Android application containing a fix to the recent vulnerability reported last week.

Protected Mobility, a Virginia-based mobile security company, announced the release of ProtectedSMS™ for Android smartphones today, a handset-to-handset solution enabling mobile users to exchange secure, encrypted text messages with individuals who have installed the software. This adds to an existing solution that was already available for BlackBerry smartphones and allows BlackBerry and Android to exchange messages.

The Air Force Association today announced that registration for CyberPatriot IV is now open, and is inviting students from all high schools or accredited home school programs in the United States to participate. No need to rush, however, as registration will be open through October 8, 2011, though space is limited.

Back in July 2010 at the Black Hat conference in Las Vegas, Microsoft announced that it would move to a new vulnerability disclosure process called “Coordinated Vulnerability Disclosure” — a reframing of responsible disclosure — in response to the ongoing debate between responsible disclosure (where a bug is disclosed only to the software vendor who then fixes it) and full disclosure (where the bug is publicly disclosed).

As expected, Oracle has issued a critical patch update containing 73 new security vulnerability fixes across hundreds of its products. Oracle also warns that due to the threat posed by a successful attack, customers should apply Critical Patch Update fixes as soon as possible.

Veracode Report Uncovers Significant Weaknesses in Security Vendor Applications. Shows Slight Decline in the Percentage of SQL Injection Errors Across All Industry Applications, While Prevalence of Cross-Site Scripting Errors Remains Unchanged

Verizon Data Breach Investigations Report Indicated Cybercriminals Shifting to Smaller, More Opportunistic Attacks; External Attacks and Hacking on the Rise

Information security commentators love to predict what the future will bring. But change is almost always gradual.

Many Voice Concern Over Database Giant’s Response to High Risk Vulnerabilities(Update 4/19 - Oracle Released The Critical Patch Update as Expected)

The European Network and Information Security Agency (ENISA), Europe’s cyber security agency, today released its final report on the first Pan-European cyber security exercise, “Cyber Europe 2010”. The exercise was conducted back in November 2010 as a way to trigger communication and collaboration between countries and as a step for strengthening Europe’s cyber defenses in the event of large-scale cyber-attacks.

Oracle has issued a critical patch update pre-release announcement saying that on Tuesday, April 19, 2011 the database giant will release will release a critical patch update containing 73 new security vulnerability fixes across hundreds of its products.

Apple released several security updates this week, addressing a number of vulnerabilities across its products ranging from Mac OS X to its Safari Web browser and iOS that runs iPhones, iPads and iPods.

Today Symantec released the 2012 beta versions of its Norton AntiVirus and Norton Internet Security products. The company says the betas improve on performance and protection and include key security enhancements, including the ability to assess the safety and stability of an application before installation.