Infosecurity News
Proactive Detection of Network Security Incidents: a new report from ENISA
The European Network and Information Security Agency (ENISA) has released a new report designed to help improve the proactive detection of security incidents. It is the result of questioning a wide range of leading CERTs combined with ENISA’s own expert input. It is a report largely by national CERTs for national CERTs; but has general relevance for any company determined to improve its security stance – and especially those that operate their own internal CERT.
Free mobile apps are not 'free' of malware, warns IEEE experts
Institute of Electrical and Electronics Engineers' (IEEE) experts have uncovered malware in more than 2,000 free smartphone applications. Free rogue applications are expected to be the most common access point for mobile hackers over the next year.
All in the Family: Android sees 90% jump in malware families this year
There has been a 90% increase in Android malware families in 2011 compared to 2010, while malicious iOS families only increased by 25%, according to FortiGuard Labs.
California county cops to publishing names of deadbeat patients
California’s Contra Costa County has informed around 4,700 residents that confidential information about debts they owed to the Health Services Department was posted online.
The Information Commissioner fines Powys County Council £130,000
This is the highest penalty ever imposed by the Information Commissioner. It follows a series of data protection breaches by Powys; the latest being the release of confidential child protection information to the wrong person.
The Americanization of the Internet: Why Kaspersky has resigned from the BSA
Kaspersky has resigned from the Business Software Alliance (BSA). First reports indicated that it was because of the BSA’s almost automatic support for the US Stop Online Piracy Act, or SOPA. Now Eugene Kaspersky has personally explained the reasons: ‘SOPA-Dodger – or why have we decided to withdraw from the Business Software Alliance’.
Adobe patches critical zero-day flaw in Reader and Acrobat
Adobe is patching a critical zero-day vulnerability in Adobe Reader and Acrobat that could enable an attacker to take control of an affected machine.
Christmas: a time of cheer, fraud and over-reaction
Christmas is the annual festive period when shoppers make merry and fraudsters make money. We need to take care; but perhaps our guardians shouldn’t be over-zealous.
M86’s new technology protects schools
M86 Security has released a new version of its Web Filtering and Reporting Suite specifically aimed at schools. With pupils’ growing use of both personal and school-issued portable devices, it is becoming increasingly important that staff are aware of what’s going on in order to adequately discharge their ‘duty of care’ on school premises.
Lloyd’s of London shows an East/West disparity in security preparedness
The 2011 Lloyd’s Risk Index has been published. While cybersecurity is only one aspect of overall business risk, it shows a surprising disparity in companies’ attitude and preparedness in information security.
Russian media, election watchdog silenced through cyberattacks
Russian media outlets and an election watchdog said they were the targets of cyberattacks during the recent Russian elections.
Anonymous vows Operation Robin Hood – steal from the rich and give to the poor
In its latest escapade dubbed Operation Robin Hood, Anonymous is vowing to steal credit cards and use them to donate money to charities and the “99%” of people who are poor.
RSA hack could have been prevented with Windows 7, says researcher
A feature that comes standard with Windows 7 would have prevented the hack of RSA, which compromised the SecureID tokens used by some of the biggest names in the US defense industry, wrote Qualys researcher Rodrigo Branco.
Sorry Vladimir, our bad: Water pump ‘hack’ just equipment failure
The contractor who helped install the industrial control system for the Curran-Gardner Public Water District in Springfield, Illinois, said the water pump allegedly hacked by the Russians in fact just burned out.
One-quarter of firms hit by cybercrime, survey finds
Nearly a quarter of organizations around the world were victims of cybercrime in the last 12 months, according PricewaterhouseCooper’s 2011 Global Economic Crime Survey.
Hackers, the UK intelligence service is looking for you!
Hackers who want a job with the UK government’s GCHQ intelligence service need to crack a code to get an interview.
Global cybersecurity spending to top $60 billion this year
Global cybersecurity spending is predicted to total $60 billion this year and to grow 10% per year for the next three to five years.
Pre-2009 HP printers vulnerable to hackers, say researchers
A security flaw found in, but not necessarily limited to, HP printers can be exploited by hackers to take full control of printer functions, according to researchers at Columbia University.
Trusteer warns that cybercriminals are moving into fresh one-stop crime areas
Research published today by Trusteer claims to show cybercriminals have widened the services they provide as a one-stop-shop to third-party fraudsters.
PCI DSS can provide information security roadmap for cloud computing
The Payment Card Industry Data Security Standards (PCI DSS) are basic information security practices that can be applied to the cloud environment in the same way as traditional environments, said Tabatha Greiner, executive consultant for global PCI quality assurance with Verizon.
