SecurityWeek

A new report from independent security testing organization NSS Labs, warns of two major flaws affecting industry leading firewalls, including a sneak attack that can go unnoticed by most organizations.

Adobe announced today that a critical vulnerability (CVE-2011-0611) exists in its Flash Player that could cause a crash and potentially allow an attacker to take control of the affected system.Adobe said there have been reports that the vulnerability is being exploited in the wild in targeted attacks via a Flash (.swf) file embedded in a Microsoft Word (.doc) file delivered as an email attachment, targeting the Windows platform. Adobe says it isn't aware of any attacks via PDF targeting Adobe...

The Texas Comptroller’s office said today that records containing personally identifying information of about 3.5 million Texans were left exposed on an agency server that was accessible to the public. The records contained the names and mailing addresses of individuals.

HP today announced the availability of its HP ePrint service App for iPhone, enabling iPhone users to unlock the power of the HP ePrint Enterprise solution which lets users print within their enterprise network via HP Managed Print Services. With the launch of the HP ePrint service App, iPhone users can now print emails, presentations, reports, travel documents and more to any networked enterprise printer.

The University of Washington took first place at the 6th National Collegiate Cyber Defense Competition (NCCDC) held this past weekend in San Antonio, Texas.

Rapid7 and Sourcefire today announced a product integration which enables Sourcefire’s 3D System to integrate active vulnerability data from Rapid7’s active scanning solution, NeXpose Enterprise. The integration enables efficient prioritization of alerts and assessment of malicious intent, giving customers a more effective threat impact analysis, covering a wider range of vulnerabilities across more applications.

Alert Logic, a Houston, Texas based provider of Security-as-a-Service solutions, today announced that it has closed a $12.6 million Series E financing.

Smart Grid Security - Utilities Must Address Several Pressing Security Concerns and Establish a Strong Cyber Security Framework, or the Benefits of the Smart Grid Will Remain a Promise, not a Reality.

Congressman Eric Cantor is the target of one man’s rage. Luckily, Norman LeBoon, of Philadelphia, will be behind bars for the next 24 months, followed by three years’ supervised release, for threatening Cantor (7th District Virginia) and a member of his family. LeBoon pleaded guilty in November of this past year to threatening Congressman Cantor and transmitting in interstate commerce a threatening communication.

Reputed innovators, universities crave the cutting edge. They need to keep current. They need to trailblaze. It’s how they can continue to advance academic status and attract fresh talent. For this reason, it makes sense that university IT departments aren’t shy about investigating and participating in the latest and greatest technology trends—including virtualization and cloud computing.

People are Vulnerable. Remind Them to be Conscious of, and Ready for an Attack.

Mocana, a San Francisco based company that focuses on smart device security, recently released a study that tuned into the impact of security threats to non-PC devices.Connected devices like smartphones, smartgrid components, Internet TVs, and medical and automobile electronics already outnumber PCs on the Internet by five to one.

"Spear Phishing" - An Inside Look at Some of the Strategies and Tactics Cybercriminals Use to Conduct Successful Phishing Attacks

How You Can Avoid Email Deliverability Problems due to Shared Email Infrastructure When Outsourcing CRM functions to a SaaS ProviderCRM and Email

The number of acquisitions in the IT security industry continues to grow. In 2010 some highlights included Intel’s purchase of McAfee, HP’s acquisitions of Fortify and ArcSight, IBM’s purchase of BigFix, Symantec’s purchases of PGP Corporation and GuardianEdge, Juniper’s purchase of SMobile, and VMWare’s purchase of TriCipher. Sourcefire started 2011 with an acquisition of Immunet.