Trending Security News

This past week saw the return of Stuxnet code in the form of a new intelligence gathering malware attack called Duqu.  Network World ran a FAQ on Son of Stuxnet story describing what Duqu is and how it works while Dark Reading ran a story titled Waiting For 'Son Of Stuxnet' To Attack that cross compares Stuxnet with Duqu and raises questions about the roles and interdependencies of the two threats. MSNBC ran a story about the possible origins of Stuxnet and Duqu.

Stuxnet 

• Waiting For 'Son Of Stuxnet' To Attack – Dark Reading
• Who's behind worm Duqu, 'son of Stuxnet'? – MSNBC
• FAQ on Son of Stuxnet – Network World

Security Research & Intelligence

• Short On Staff, Many IT Organizations Feel Unprepared For New Threats – Dark Reading
• Security remains a top concern for cloud app builders – InfoWorld
• Report: Hacking forum is a cybercrime academy – The Register
• By the Numbers: The Impact of Data Breaches – CIO

Cyber Threat

• JBoss Worm Exploiting Old Bug to Infect Unpatched Servers – Threat Post 
• Mass Injection Attack Targets ASP.NET Sites – Threat Post
• Software Pirate Cracks Cybercriminal Wares – Krebs on Security
• Where's the Steve Jobs of IT security? – Computerworld

Government, Legislation & Policy

• Obama officials press for cybersecurity bill in classified briefing – Hillicon Valley
• DHS Appoints Weatherford Cybersecurity Chief – InformationWeek
• It’s Official!  US Intelligence Community is Moving to the Cloud! – Forbes

Blog Picks

• Applied Network Security Analysis: Introduction – Securosis
• Some Thoughts on Binary Risk Assessment – The New School of Information Security
• Cyber Crime Explodes - But Few Take Action – Joel Harding, Infosec Island

Microsoft Research, Papers and Media

• Cybersecurity/Internet Health
  • Rethinking the Cyber Threat (paper)
  • Collective Defense: Applying Public Health Models to the Internet (paper)
  • Video: Collective Defense: Enabling Healthy Devices (video)
• Security Intelligence
  • NEW: Lessons from Least Malware Infected Countries (series)
  • Battling the ZBot Threat (paper)
• Trustworthy Computing
  • Imagine Video: Microsoft Trustworthy Computing (video)
• Cybersecurity/Trusted Supply Chain:
  • Supply Chain Risk Management keynote at the East-West Institute’s Second Worldwide Cybersecurity Summit (video)
  • Cyber Supply Chain Risk Management: Toward a Global Vision of Transparency and Trust (paper)
  • Toward a Trusted Supply Chain: A Risk Based Approach To Managing Software Integrity (paper)