Thursday September 9, 2010

IBM Fingers Web Apps As Culprit Behind 36 Percent Rise In Enterprise Security Threats

IBM put out a new report (embedded below) on security threats to enterprise computer networks today from its X-Force security research group. It found a 36 percent increase in security vulnerabilities, with Web applications being the main culprit. Web apps with security exploits accounted for 55 percent of all disclosed vulnerabilities.
One of the [...]

USB flash drives a major security risk

According to the Washington Post, a top Defense Department official is
speaking publicly a successful, high-profile infiltration of a computer network
belonging to the US military’s Central Command.
Deputy Defense
Secretary William J. Lynn III describes the attack in an article to be published
today in Foreign Affairs. The incident occurred in 2008 at a post in the middle
east and [...]

HP Acquires Software Security Company Fortify

In the wake of former CEO Mark Herd’s sexual harassement scandal, HP is announcing that it is acquiring Fortify, a software security company. Terms of the deal were not disclosed.
Fortify’s Software Security Assurance products and services protect companies from security threats in busines software applications. The company’s software evaluates and test software code for [...]

Security infrastructure definition key to productivity

Complex security policies
can be difficult for employees to follow, it is unrealistic to leave
security in the hands of mobile employees. An effective enterprise security plan should
provide for simple, automated, scalable, and comprehensive ways to protect IT
investments and maintain worker productivity. Organizations must approach
security from a comprehensive perspective that ranges from the desktop to the
data center, [...]

Webroot Acquires Hosted Internet Security Services Provider BrightCloud

Internet security company Webroot today announced it has acquired BrightCloud, a Web content classification and security services provider. Webroot aims to integrate BrightCloud’s technology with its own proprietary malware detection and security-as-a-service (SaaS) technologies.
Terms of the acquisition were not disclosed, but the BrightCloud team will join Webroot’s Cloud Engineering team with an expanded focus on [...]

IBM Acquires Enterprise Data Security Software Company BigFix

IBM is making another acquisition today, buying up computer security software company BigFix. Terms of the deal were not disclosed.
BigFix security software identifies all of a company’s PCs, laptops, server and then monitors and flags IT administrators when devices are not in compliance with corporate IT security standards. Its software promises to make security [...]

Deloitte: Security executives making identity and access management tools top priority

Deloitte has released the results of its 2010 security survey, entitled "The Faceless Threat," for which the consultancy's global financial services team surveyed senior information technology executives at more than 350 major financial institutions earlier this year.

The results show that senior security executives at the world's largest financial institutions are making investments in identity and [...]

Google Does The Hard Sell On Security For Its Enterprise Apps

It’s no secret that Google has ambitions of becoming an Enterprise productivity suite powerhouse; perhaps one day taking over the top spot from Microsoft. As Google’s President, Global Sales Operations and Business Development Nikesh Arora told us at TechCrunch Disrupt a last week, Google hopes for Apps to be a billion dollar revenue stream in [...]

Oracle Acquires UK-based Data Security And Control Company Secerno

Oracle is acquiring Secerno, an Oxford, UK-based provider of database firewall solutions for Oracle and non-Oracle databases. The terms of the agreement were not disclosed, and Oracle expects the transaction to close before the end of June 2010.
Until the deal closes, each company will continue to operate independently.
Secerno’s solution adds a critical defensive layer of [...]

Accenture: Perception of data security at odds with reality

Nearly
three-quarters of organizations believe they have adequate policies in place to
protect sensitive, personal information, yet more than half have lost sensitive
data within the past two years — and nearly 60 percent of those organizations
acknowledge data loss as a recurring problem, according to findings of a global
study released today by Accenture.

The study —
which surveyed more than [...]