Infosecurity News
ICO re-opens Google Street View probe in the UK
The UK’s data protection watchdog, the Information Commissioners Office, has written to Google demanding further information about the collection of personal data via its Street View project.
One-third of CEOs have never been briefed by CISO on security
A disturbing 36% of chief executive officers (CEOs) have never received an information security report from their chief information security officer (CISO), a survey sponsored by CORE Security found.
US attorney general appoints prosecutors to probe Stuxnet leak
Attorney General Eric Holder has appointed US attorneys to investigate the leak of information about the US government’s involvement in developing the Stuxnet worm, along with other recent national security breaches.
Security is a pillar of Dell's strategic vision
Michael Dell participated in one of the keynotes at this week’s Gartner Security and Risk Summit outside Washington DC, in what amounted to a fireside chat with Gartner analysts about Dell’s future in IT security.
‘Adding Game’ on Facebook spam alert
Barracuda Labs has discovered a new Facebook spam methodology currently being seeded across the social network giant.
SandForce SF-2000 SSD Processor’s AES-256 is broken
SandForce, acquired by LSI earlier this year, produces flash storage and SSD processors. For more than a year it has been selling its SF-2000 SSD Processor product with AES 256 encryption – that doesn’t work.
The Metropolitan Police Vs Confidential Access – six sentenced
Six men associated with Confidential Access were given sentences at Southwark Crown Court on Friday (8 June), ranging from 6 years 9 months to 2 years suspended, for “a catalogue of fraud offences.”
Qualys Inc files for $100m IPO
On Friday 8 June, Redwood City-based Qualys Inc filed a registration statement on Form S-1 with the Securities and Exchange Commission relating to a proposed initial public offering of shares of its common stock.
PCI requires merchants to pass internal vulnerability assessments
The PCI Standards Security Council will require merchants to show proof of passing an internal vulnerability assessment beginning June 30, noted Alex Quilter, director of PCI at Qualys.
Security is fundamental to continued adoption of mobile innovations
The exploding mobility trend will continue to advance only as long as people who use the devices feel they can be trusted. That was the focus of Mobiquity CEO Scott Snyder’s opening keynote at this week’s AT&T Cyber Security Conference in New York.
Senators propose compromise cybersecurity bill
In an effort to break the cybersecurity logjam in the US Senate, two senators have proposed a compromise draft bill that they hope will be acceptable to both Democrats and Republicans.
Week of the Password Breach: Last.fm is lastest victim
Music website Last.fm joins the growing list of websites that have had their customers’ passwords exposed on the internet this week.
NHS electronic health records: Benefits and dangers
Over the next few years, health records in the UK will become largely digital. Andrew Lansley’s new NHS Information Strategy offers both huge benefits and serious dangers for the future of the NHS/patient relationship.
SOCA announces jailing of two UK credit card crooks
Freshshop, the site set up and run by Jay Moore (aka t0pp8uzz) was a one-stop card fraud shop. Now Moore and his money-mule helper and co-conspirator Damian Horne (aka GM) have been jailed following an investigation by the UK Serious Organized Crime Agency (SOCA).
Not all is harmonious at eHarmony: Dating site admits to password breach
Online dating site eHarmony joins LinkedIn as the latest social networking site to be hacked, admitting to a breach that may have exposed 1.5 million user passwords.
Adobe issues free security patches for older version of Photoshop, Illustrator
Bowing to pressure from users of the CS5 versions of Photoshop and Illustrator, Adobe has issued free security patches to plug critical flaws in the software that could enable an attack to take control of a vulnerable system.
Flame: why was it missed for so long?
While the in-depth analysis of Flame continues, and we learn more and more about its intricacies and capabilities, one question remains: why did the AV industry fail to spot it earlier?
Taking a bite of the iOS security Apple: A glimpse inside
In an unprecedented move at openness, Apple has issued a document on iOS security that provides details on the system architecture, encryption and data protection, network security features, and device access for iOS devices.
Facebook redesigns admin controls to prevent page hijacking
Facebook has improved the protections for page administrators by enabling them to assign lower admin rights, which helps prevent page hijacking.
Warning about the dangers in browser syncing
Chrome v19 introduced a ‘tab sync’. This in turn, claims Imperva, introduces a new threat vector for business – a threat Imperva terms BYOB (bring your own browser).
