The SC Magazine Newswire - December 15, 2009

December 22, 2009 — Click here to view this newsletter online.

Principal Sponsor — Trend Micro

Security impacts of virtualization

Date/time: Thursday, Dec. 17 at 2:00 p.m. ET/11:00 a.m. PT

Join SC Magazine's senior editor Dan Kaplan and Trend Micro's CTO anti-malware Raimund Genes as they discuss the security impacts of virtualization in SC Magazine's unique new 20/20 webcast series. The free 20-minute webcasts will feature a member of the SC Magazine editorial team in conversation with various industry thought leaders discussing the past, present and future of IT security. Sponsored by Trend Micro.

Click here to register for free.

Latest News

McKinnon's latest appeal protests home secretary ruling

Dan Kaplan December 10, 2009

Accused NASA hacker Gary McKinnon is not going down without a fight as he tries to avoid extradition to the United States.

SQL attack hits 125,000 sites

Angela Moscaritolo December 10, 2009

An SQL injection attack that began in late November has compromised more than 125,000 web pages, researchers at web security provider ScanSafe, recently acquired by Cisco, said Wednesday in a blog post. The sites have been injected with an IFRAME that loads malicious content from a known malicious domain, 318x.com. A number of other IFRAMEs and code redirections, used for tracking purposes, untimely aim to install the trojan Backdoor.Win32.Buzus.croo on the user's system. The malware generally is used for credit card and other banking-related theft. — AM

Zeus rains from the cloud

Angela Moscaritolo December 10, 2009

A new variant of the Zeus trojan is using the Amazon Elastic Compute Cloud (EC2) web service for its command-and-control center, according to IT management and software vendor CA. Attackers are pushing the latest Zeus, or Zbot, variant by using fake holiday greeting card spam messages that contain a malicious executable called "xmas2.exe." One executed, the trojan communicates with the cloud-based command hub. — AM

ActivIdenity-CoreStreet deal

Dan Kaplan December 14, 2009

Fremont, Calif.-based ActivIdentity on Monday acquired CoreStreet to complement its strong authentication and credential management solution portfolio. Under the $20 million deal, ActivIdentiy will gain Cambridge, Mass.-based CoreStreet's public key infrastructure certification (PKI) technology, distributed identity credential validation system and physical access control products, according to a news release. The two vendors already had been partnering to offer combined solutions for government and enterprise customers. — DK

Associate Sponsor — SC Virtual symposium: Botnets

Keynote Speaker
Gary Warner, director of research in computer forensics, University of Alabama at Birmingham

Sponsored by
Damballa

Click here to view on demand

National data breach notification bill passed in U.S. House

Angela Moscaritolo December 10, 2009

The Data Accountability and Trust Act would require any organization that experiences a breach of electronic data containing personal information to notify all affected U.S. residents.

TJX hacker to plead guilty to Heartland breach

Angela Moscaritolo December 09, 2009

Albert Gonzalez on Tuesday agreed to plead guilty on charges of hacking into Heartland Payment Systems, 7-Eleven and Hannaford Bros.

Judge dismisses shareholder lawsuit against Heartland

Dan Kaplan December 09, 2009

A federal judge in New Jersey has thrown out one of the three class-action lawsuits pending against Heartland Payment Systems.

Eastern Illinois University server hacked

Angela Moscaritolo December 09, 2009

The personal information of former, prospective, and current undergraduate students at the university may have been stolen when a hacker gained access to the university's Office of Admissions server.

Principal Sponsor — Trend Micro

How we test products

Check out this month's issue to see the other companies we picked.

How we test products:

Click here to take a look at the methodology we use to evaluate each product we test.

Call for Papers — SC World Congress New York & SC Congress Canada

A call for papers is now open for the third annual SC World Congress in New York and the inaugural SC Congress Canada. Visit the home page of the SC World Congress and find (under "Key Links" at the right) how to be a presenter or speaker at these two events. Click on the "Call for Papers" links to learn more.

SC Events Calendar

TODAY
SC Webcast: Securing, controlling and auditing critical databases

June 21, 2011
SC eConference: Auditing and compliance

July 28, 2011
SC eConference: Securing the cloud

Aug. 25, 2011
SC eSymposium: Social networking - Threats and solutions

Join us on Facebook!

Advertise
For details on exclusive sponsorship of The SC Magazine Newswire, please send a message to Mike Shemesh

Subscribe
If you were sent this by a colleague and wish to subscribe to The SC Magazine Newswire, please click here.

Unsubscribe
To unsubscribe from The SC Magazine Newswire click here.
To manage your entire SC Magazine profile login to your account.

You are subscribed as: %%EMAIL%%

To contact Haymarket Media for general questions or unsubscribe problems, please e-mail newslettersupport@haymarketmedia.com

All SC Magazine newsletters are sent from the domain "email.scmagazineus.com". When configuring e-mail or spam
filter rules, please use this domain name.

Haymarket Media Inc
114 West 26th St 4th floor
New York, NY 10001
© 2012 Haymarket Media Inc.