Adobe confirms PDF zero-day, plans rush patch

/
Adobe today said it would issue an emergency patch the week of Aug. 16 to fix a critical flaw in its Reader and Acrobat software. The bug was disclosed by researcher Charlie Miller at last month's Black Hat security conference when he demonstrated how the open-source BitBlaze toolkit could be used to boost bug-hunting productivity tenfold.

Arlington, VA hosts SANS training program for the CISSP(R) Certification Exam, October 4 – 9

/
SANS is pleased to announce Community SANS Arlington, VA where we will teach Management 414: SANS Training Program for the CISSP(R) Certification Exam, October 4 - 9. The course will be taught by SANS Certified Instructor Ted Demopolous. For complete course description, event details, and to register, please visit (https://www.sans.org/arlington-2010-cs).

SC Magazine Webcast – IBM 20/20 Webcast

/
SC Magazine is pleased offer a unique webcast series - SC Magazine 20/20. The free webcast series features a member of the SC Magazine editorial team sitting down with various industry thought leaders to discuss the past, present and future of IT security. Our next webcast in the series:

SecurityOrb.com Deal of the Week – Samsung NP-N130-JA01US Refurbished Netbook from TigerDirect

/
The SecurityOrb.com deal of the week comes from TigerDirect.com . It is a refurbished Samsung NP-N130-JA01US Netbook with a webcam and Windows 7 Starter.

New threat: Hackers look to take over power plants

/
Computer hackers have begun targeting power plants and other critical operations around the world in bold new efforts to seize control of them, setting off a scramble to shore up aging, vulnerable systems.

Microsoft Security Bulletin MS10-046 – Critical

/
Microsoft Security Bulletin MS10-046 - Critical Vulnerability in Windows Shell Could Allow Remote Code Execution (2286198)

Electric Grid Vulnerabilities Exposed

/
Computer networks controlling the electric grid are plagued with security holes says a new Energy Department report based on the findings of 24 assessments of computer-control systems performed between 2003 and 2009. Many are VERY basic.

The 2010 Computer Security Salary Survey

/
The 2010 Computer Security Salary Survey was launched this morning. Please complete it today or at least this week (takes 5 minutes). A valid survey is probably the most valuable tool security people have to have productive conversations with their employers about their salaries. You get the results if you participate.

Run ArcSight Express on the Apple iPad

/
Now you can have total security intelligence at your fingertips - anywhere, anytime. ArcSight Express is so easy to deploy and simple to use, we are running it on an Apple iPad. In fact, we are having so much fun that we are offering an Apple iPad certificate with every purchase of ArcSight Express in August or September.* Learn more about this offer and how you can protect your business with ArcSight Express:

Top 10 Countries Sending Spam (Jul 19-Jul 25)

/
Though the top four positions remained the same last week compared to the week before, Brazil continues to slowly account for a larger percentage of the spam pie. Russia and the United States had larger than usual gains (up 1.2% and 1.4% respectively) according to data collected by ICSA Labs. The increase for the United States was enough to move that country into the 5th position among the Top 10 Countries Sending Spam. See who else rounds out the top 10. Also see the graphrepresenting spam percentages over the last several months for many of the top spam sending nations.