Infosecurity News
ISF publishes guide on risk-free Federated Identity & Access Management
The Information Security Forum (ISF) has published a new report on Federated Identity and Access Management that describes the methodology that IT security professionals need to adopt when implementing the technology into their systems.
Symantec reports one-click fraud has arrived on smartphones
Do you want the good news, or the bad news first? The bad news is that one-click fraud has, at long last, arrived on smartphones. The good news (unless you live in Japan) is that the frauds are focused on Japanese language users of mobile phones.
Fake iTunes updates demolish the idea that Apple iOS is secure
The long-held belief that the Apple iOS platform is inherently secure due to Apple’s walled garden approach to software has been holed once again, this time by a security firm that has developed a method of sending Fake iTunes and Flash updates to iPhone and iPad users.
Websense slams Motorola Android ad campaign on security grounds
Websense has slammed the latest ad campaign from Motorola for its Droid Razr smartphone, citing the fact that the Android platform is secure.
Lieberman Software president warns on silent update feature being developed for Firefox 10
Mozilla is reported to be making inroads on adding a silent update mechanism to its popular Firefox desktop web browse, and plans to integrate the new service into Firefox 10 early next year, although this timeframe may slip a few months, the open source organization says.
Prolexic mitigates world's largest packet-per-second DDoS attack
Prolexic Technologies claims that it has successfully mitigated what it claims was the world's largest DDoS attack in packets-per-second (PPS) terms - 69 million packets-per-second and with an amazing 45 Gbps of traffic.
Know your enemy: Staying one-step ahead of cyberthreats
Advanced intelligence capabilities are crucial for organizations to stay one step ahead of cyberthreats, advised Rick Howard, general manager of VeriSign iDefense.
ISO issues two new records management standards
The International Organization for Standardization (ISO) has unveiled two new records management standards for storage and disclosure of corporate information.
Krebs on Security website servers hit by DDoS attack
The dangers of reporting on matters of a darker nature in the world of IT security were thrown sharply into focus today when security researcher Brian Krebs revealed he had experienced a sustained DDoS attack on his news servers.
More than 150 data breaches uncovered in Norfolk and Suffolk, England
A Freedom of Information request has uncovered more than 150 breaches of the UK Data Protection Act (DPA) since 2008 at police departments, city and county councils, and hospitals in Norfolk and Suffolk, England.
Data security analysts' salaries to rise 6%, says Robert Half
Salaries for data security analysts are predicted to rise 6% in 2012, while IT salaries overall are expected to increase 4.5% next year, according to research by Robert Half Technology.
Russian hackers behind first successful US SCADA system attack
Russian hackers are reported to have been behind an attack on a water utility station in Springfield, Illinois, earlier this month, destroying a pump after gaining unauthorized access to the system.
Customisable version of the Android Spitmo malware ported to the Symbian platform
F-Secure’s research team claims to have discovered a recode of the Spitmo malware for the Symbian smartphone platform.
Archiving email on webmail services exposes sensitive data
Close to one-third of companies are archiving email on free webmail services such as Gmail and Hotmail, which exposes potentially sensitive information in those emails to breaches.
Skype PayPal phishing campaign under way
Skype users are being warned about a phishing campaign designed to harvest their PayPal account credentials.
Facebook porn spam security breach raises concerns
Facebook is investigating a huge wave of spam attacks that have caused violent and pornographic images to be posted on some users’ profile pages.
Kaspersky Lab reports BIOS infections are making a cybercriminal comeback
The Q3 security threats report from Kaspersky Lab claims that all manner of new and varied threats are now heaving into view on the threats horizon. Threats such as hidden malware in QR codes all the way to targeted attacks on major firms are the latest problems on the internet, the security vendor notes.
Norway’s oil, gas and defense industries hit by major data theft
Reports are coming in of a major data theft involving a range of Norwegian organizations in the country’s oil, gas and defense arena. Unconfirmed reports suggest that the cyber-espionage case may the biggest in European history.
EURid adds easy-signing DNSSEC technology to web site registration
EURid, the .eu top level domain registry, has taken the wraps off a new service for internet registrars that simplifies the signing and managing of .eu domain names enabled for the Domain Name System Security Extensions (DNSSEC) enhanced hosting facility.
Border control specialist says more needs to be done with passenger history
As the ongoing furore over the relaxation of security at UK border crossings continues with politicians name-calling the UK’s border control agency, a leading biometric and border control specialist says that more needs to be done behind the scenes to boost the UK’s security.
