Infosecurity News
Education programs are hardly a security ‘silver bullet’
User education is often touted as a cornerstone of any effective IT security program. But as Jack Daniel, community development manager with internet security firm Astaro contends, not every organization will reap benefits from educating its end-users.
RSA 2011: Terrorist groups pose most dangerous cyber threat
While nation-states actively attempt to exploit the networks of the US government, critical infrastructure, and commercial networks, US Deputy Secretary of Defense William Lynn told the RSA Conference audience that terrorist groups are inevitably more likely to fire the most severe type of destructive cyber warfare salvos.
Real-world ATM skimming techniques revealed
Security researcher Brian Krebs has had a long-standing interest in the increasing problem of ATM skimmers - fraudsters who install hidden gadgets on cash machines with the intention of ripping off bank card customers. And he has posted an in-depth analysis of one such scam earlier today.
Panda Security launches 'Internet in Safe Hands' campaign
Panda Security has launched a senior citizens' safer internet campaign, with the aim of educating people over 60 on how to make their internet activities more safe.
New York City hospital system admits to massive data breach
The New York City Health and Hospital Corp. (HHC) said that personal information of nearly 1.7 million hospital patients, staff, vendors, and contractors was stolen from a GRM Management Information Services van.
RSA Security: Commtouch intros unified security engine
It's day two of the RSA Conference in San Francisco and Commtouch has taken the wraps off what it claims is the industry's first unified engine that combines three internet security technologies.
Salesforce.com moves to ‘Cloud 2’ says its CEO
As the keynote presenter at the Cloud Security Alliance Summit today in San Francisco, Marc Benioff, chief executive officer of salesforce.com, introduced his vision of ‘Cloud 2’. “The best days are still very much ahead of us in this industry”, he told the audience.
Australian ambulance dispatch system downed by malware
Reports are coming in the New South Wales (NSW) ambulance dispatch system was downed at 1pm local time on Saturday by a computer virus, forcing dispatch officers to move to a back-up paper-based system.
Mobile World Congress: F-Secure introduces Android and Symbian protection
F-Secure has released version 7 of its Protection Service for Mobile (PSM 7) which extends the smartphone security software-as-a-service (SaaS) platform to support Google Android and Symbian handsets.
Interview: Matt Moynahan, CEO, Veracode
With mobile and application security on more agendas than ever before, Veracode’s CEO, Matt Moynahan, talked to Infosecurity’s Eleanor Dallaway about why Microsoft are doing security better than Symantec, why Apple will be raising their eyebrows in embarrassment, and why really good coders with security knowledge are in short supply...
German researchers crack iPhone security in 360 seconds
Reports are coming in that a team of German researchers have successfully shown how to crack the security of a stolen iPhone in under six minutes.
DHS tells IT forensics investigators to go CyberFETCH
The Department of Homeland Security is setting up an IT forensics clearinghouse called CyberFETCH to provide a secure collaborative environment for law enforcement, private industry, and academia.
German researchers crack iPhone security in 360 seconds
Reports are coming in that a team of German researchers have successfully shown how to crack the security of a stolen iPhone in under six minutes.
ID card database destroyed
The National Identity Register (NIR), which was built to hold the fingerprints and personal details of millions of ID card holders, has been publicly destroyed.
Adobe patches 68 security flaws across several product lines
In addition to patching flaws in Reader and Acrobat with its latest quarterly update, Adobe has addressed security flaws for Flash, Shockwave and Cold Fusion.
Visa offers program encouraging merchants to adopt chip-enabled terminals
Visa is encouraging merchants to adopt EMV-compatible chip terminals capable of processing either contact or both contact and contactless payments as part of a Payment Card Industry Data Security Standard (PCI DSS) compliance program.
Chinese hackers target oil companies
Hackers from China have attacked the computer networks of global oil companies with the intention of stealing information.
European organisations living on borrowed time if they fail at data breach notification, says insurer
A white paper just published claims that organisations that choose not to notify on data breaches are living on borrowed time.
UK public sector hampered by email size restrictions
Research just released claims that the limitations on what can – and cannot – be sent via email, due to message size considerations, is hampering the efficiency of the public sector in the UK. And as a result, some workers are now using file-sharing services to send their large files.
Russian hacker pleads guilty in $10m WorldPay scam, but escapes jail
A Russian hacker has pleaded guilty to stealing $10m from the WorldPay online transactions service, spending the proceeds on two apartments and a luxury car. And, incredibly, he has escaped a jail sentence.