Infosecurity News
(ISC)² says governments need infosed community to drive strategy and standards
(ISC)², the not-for-profit IT security association, says that, against a backdrop of more and more governments recognising the need for cyber security strategies, they now need to recognize the requirement for internationally recognised skills, principals and practices to tackle what is a very sophisticated global threat landscape.
Hitchcockian thriller: Angry Birds can find you anywhere
Alfred Hitchcock could not have written a better script. It seems that the Angry Birds can find out where you live simply by your downloading their app.
Barclay Simpson publishes first quarterly rate card for security contractors
Barclay Simpson’s information security contract division has published its first quarterly rate card for contractors in the IT security industry, noting that technology risk consultants can earn £710 a day, ranging down to data privacy analysts who can command £475 a day.
Verizon says high-IQ network and enterprise clouds will be the security challenges for 2012
In its annual review of the top business IT trends for the year ahead Verizon says that high-IQ networks and the enterprise cloud will foster business innovation and a borderless workstyle in 2012.
Next-gen Android trojan uses Google Library disguise
China's NetQin - in conjunction with a research team with North Carolina state university - claim to have discovered a new type of Android trojan that disguises itself as a Google Library.
Codenomicon gets fuzzy on security testing
Codenomicon has taken the wraps off a completely reworked version of Defensics X, its security and robustness testing application. The new version is billed as using fuzzing techniques to enhance its capabilities.
Free Android anti-virus products "virtually useless", says report
An in-depth report from AV-Test.org claims that the raft of Android anti-malware apps that have arrived in the last 12 months or so are all virtually useless.
Which? Magazine reports privacy fatigue hitting Facebook
The latest issue of Which? Computing – the magazine of the UK Consumer’s Association – has published a special report on privacy on the Facebook social network services.
Computershare hit by rogue employee data theft
Computershare, the international share dealing company – which claims to be the largest in its market – has been hit by a data theft incident from a former employee. What perhaps makes matters worse is that the staffer was an audit risk professional.
Estonian group revealed as key ChronoPay investors
The saga of Russia’s ChronoPay electronic money operation – which has been hit by arrests and dark accusations over the last 12 months – continued this week with the revelation that an Estonian company is a key investor in the firm.
With data breaches, failing to plan is planning to fail, says Forrester
A poorly contained data breach and mishandled response could cost companies millions of dollars in lost business and damaged reputation, warns Forrester analysts.
Apple plugs 17 holes in Java for Snow Leopard and Lion
Apple has fixed 17 vulnerabilities in Java for OS X Snow Leopard and Lion, a move that brings the Mac operating systems up to date with Oracle’s Java SE 6 update 29.
Firefox 8 fixes five critical security flaws
The newest version of Firefox plugs eight security holes, including five that are rated as critical and three as high.
Malaysian certificate authority trust revoked by Mozilla and others
An intermediate web certificate authority has had its trust revoked by Mozilla after it was found to issue weak and potentially compromisable certificates.
Adobe cans development for Flash on mobile devices
Adobe has perhaps bowed to the inevitable and, in a notice to developers, advised them that it is ceasing development of the Adobe Flash environment for smartphones and tablets, although critical security and bug fixes will be available.
Estonia takes down massive cybercriminal net
Reports are coming in that officials in Estonia – arguably one of the most internet-savvy governments in the world – have taken down a massive DNS-changing cybercrime operation involving a click-fraud program that infected more than four million computers in over 100 countries.
Proof-of-concept malware sneaked onto Apple iTunes; developer given the axe
When is a flaw not a flaw? When it's a feature of the operating system, it seems, as serial Apple Mac cracker Charlie Miller has tapped a feature of Apple's portable operating system and created an iPhone/iPad app that allows almost complete remote access to the device.
Massive DNS poisoning attacks under way in Brazil
Kaspersky Lab has made the interesting discovery that there is a massive DNS poisoning attack under way in Brazil, with several ISPs in the country falling victim to the attacks.
DARPA to increase cybersecurity research investment by 50% over five years
The Defense Advanced Research Projects Agency (DARPA) plans to increase investment in cybersecurity research by 50% over the next five years and focus more on offensive cyberwar capabilities, according to the head of the agency.
How much is your date of birth worth to cybercriminals?
Infosecurity has reported on the value of stolen credit and debit card credentials several times this year, but now a security researcher has analyzed the value of individual credentials such as your birthday or mother's maiden name – that's right, they all have a value.
