Popular HTTPS sites still vulnerable to OpenSSL connection hijacking attack

	Hacked Synology NAS systems used in high-profit cryptocurrency mining operation | Popular HTTPS sites still vulnerable to OpenSSL connection hijacking attack
	ITworld Security Strategies				Forward this to a Friend >>>
	Biggest, baddest, boldest software backdoors of all time These 12 historically insidious backdoors will have you wondering what's in your software -- and who can control it Read More WHITE PAPER: Imperva IPS and NGFWs Leave Dangerous Gaps in Enterprise Security Firewalls and intrusion prevention systems don't provide sufficient protections for most public-facing websites or internal business-critical and custom Web applications. Here, we explain how Web application firewalls help security leaders better protect Web applications in their organizations. Learn more! In this Issue Hacked Synology NAS systems used in high-profit cryptocurrency mining operation Popular HTTPS sites still vulnerable to OpenSSL connection hijacking attack Waratek tackles Java application security Spamhaus readies new antimalware data feeds Best practices for facing today's log management challenges Protect your brand with Alert Logic PCI DSS compliance solutions The next Heartbleed: 5 security vulnerabilities to watch Most U.S. credit cards will have microchips by end of 2015 Target finally gets its first CISO Security Manager's Journal: Taking steps to better lock down the network WEBCAST: CA Technologies The End of Data Protection As We Know It. A fundamental change is necessary to fix data protection. It requires the adoption of a modern architecture that has been designed to solve today's complex problems, as well as provide a highly scalable platform for the future. Learn more! Hacked Synology NAS systems used in high-profit cryptocurrency mining operation A hacker exploited publicly known vulnerabilities to install malware on network-attached storage systems manufactured by Synology and used their computing power to generate Dogecoins, a type of cryptocurrency. Read More Popular HTTPS sites still vulnerable to OpenSSL connection hijacking attack Some of the Internet's most visited websites that encrypt data with the SSL protocol are still susceptible to a recently announced vulnerability that could allow attackers to intercept and decrypt connections. Read More Waratek tackles Java application security Waratek is introducing its first product aimed at Java application security, and it works by identifying weaknesses, especially in open-source platforms, and then acts like a shield against attacks. Read More Spamhaus readies new antimalware data feeds The Spamhaus Project will soon publish two new data feeds intended to prevent people from being lured to malware-infected websites and domains. Read More Best practices for facing today's log management challenges This whitepaper discusses key best practices to consider when evaluating automated log management solutions. Read More WHITE PAPER: Riverbed Technology Microsoft Office Infographic Deliver Microsoft Office 365 up to 33 times faster while using 97% less bandwidth View Now>> Protect your brand with Alert Logic PCI DSS compliance solutions Alert logic's cloud-powered solutions help organizations that process, store or transmit credit card data eliminate the burden of PCI compliance. This product brief outlines Alert Logic's solutions and the unique benefits offered. Read More The next Heartbleed: 5 security vulnerabilities to watch Security experts offer their take on five large-scale, Heartbleed-level vulnerabilities. Read More Most U.S. credit cards will have microchips by end of 2015 The long expected migration of the U.S. payment system to the Europay MasterCard Visa smartcard standard finally appears to be gathering steam. Read More Target finally gets its first CISO Target has hired a new Chief Information Security Officer, a move that's noteworthy mainly because it is the first time the company has had anyone in this role -- even though it is one of the largest retailers in the U.S. Read More Security Manager's Journal: Taking steps to better lock down the network The resources on our network have been given too much access to the Internet, and we need to curb that. Read More
	SURVEY Take ITworld's cloud survey and you could win $500 ITworld is conducting a brief survey regarding cloud computing initiatives, and we value your input. The survey will take you about 10 minutes to complete. And there's a reward! Respondents who complete the survey will be entered in a sweepstakes to win a $500 cash prize. Take the survey now! GIVEAWAYS: Enter today for your chance to win! The Rails 4 Way Through detailed code examples, you'll dive deep into the Rails 4 code base, discover why Rails is designed as it is, and learn how to make it do exactly what you want. Enter now! JavaScript Essentials LiveLessons (Video Training) In 4 hours of video instruction, JavaScript Essentials LiveLessons provides a solid foundation on which to build skills, from the perspective of a web developer. Enter now! DON'T MISS... 10 tech products that are built to last 16 terrible computer pranks that could get you fired Your new PC needs these 22 free programs Pants on fire: 9 lies that programmers tell themselves History's 15 most popular computer scientists
	Get more peer perspective online Google+ | LinkedIn | Facebook | Twitter You are currently subscribed to itworld_security_strategies as garn14.tech@blogger.com. Unsubscribe from this newsletter | Manage your subscriptions | Subscribe | Privacy Policy If you are interested in advertising in this newsletter, please contact: sean_weglage@itworld.com To contact ITworld, please send an e-mail to online@itworld.com. Copyright (C) 2014 ITworld, 492 Old Connecticut Path, Framingham, MA 01701. ** Please do not reply to this message. If you want to contact someone directly, send an e-mail to online@itworld.com.