Infosecurity News
500 000 websites hacked, including Apple
An SQL injection hack has affected more than 500 000 websites according to recent reports, including two sites maintained by Apple to promote iTunes podcasts.
NIST announces approved procedures for EHR systems testing
The electronic health record (EHR) certification program is no longer temporary, as the Office of the National Coordinator for Health Information Technology (ONC) has removed the ‘pending’ label from its EHR approved testing procedures, developed by the National Institute of Standards and Technology (NIST).
Ocean Blue develops green software to tackle standby power consumption
A digital TV software specialist, whose Sunrise digital video broadcast (DVB) firmware is found in a number of TV set top boxes, has taken the wraps off a 'deep hibernation' system for TV digiboxes that slashes standby power consumption.
Government could outsource IT to India, says Ovum
The government should consider offshoring IT work to India to achieve spending cuts, according to analyst firm Ovum.
Android game app conceals GPS tracker
A malicious application that conceals spyware and GPS tracking behind a mobile phone game has been discovered in the Android app store.
Gartner predicts 11% growth for security software market in 2010
Although the global downturn slowed security revenue to 7% growth in 2009, organizations globally have indicated their intention to give priority to security budgets, says Gartner.
Internet users' careless password usage increases ID theft
Research released by credit reference agency Experian claims to show that the careless use of passwords on the internet is creating an identity theft paradise of criminals.
FaceTime extends Web 2.0 control technology into the cloud
FaceTime Communications has unveiled a software-as-a-service (SaaS) version of its Unified Security Gateway technology, which allows enterprises to gain granular control over the use of Web 2.0 and social networking systems plus services.
PCI standards slated for revision
The PCI Security Standards Council (SSC) has provided a preview of upcoming changes to two of its standards covering the payment card industry.
Smartphones with touch screens may be vulnerable to smudge attacks
Research carried out by the University of Pennsylvania claims to show that it possible to make an intelligent guess as to a smartphone users' handset password by the density and direction of the `smudges' on the mobile's touch screen.
CESG adopts IISP skills framework for Information Assurance
CESG, the national technical authority for information assurance across the public sector, has announced it is adopting the Institute of Information Security Professionals (IISP) skills framework as the basis for its own professional skills and competency programme.
Microsoft holds off on patching latest security vulnerability
A representative from the Microsoft Security Response Center said the company is investigating the security flaw disclosed earlier this week but that it will not issue a separate advisory based on current information.
Explosion of data driving information security industry
In ArcSight’s Silicon Valley office, Rick Caccia, the infosec firm’s vice president of product marketing, tells Infosecurity’s editor, Eleanor Dallaway, that in addition to the constant tide of cybercrime, it’s huge amounts of data that are driving this industry.
Hackers are winning the cat-and-mouse game against anti-virus programmers
Ever since malware writers swapped worldwide infamy for hefty profits, they have become a larger problem to deal with. And, says Ron Clarkson, senior vice president of CoreTrace, as the game of cat-and-mouse with anti-virus software programmers continues, hackers remain one step ahead of their chief nemesis.
Explosion of data driving information security industry
In ArcSight’s Silicon Valley office, Rick Caccia, the infosec firm’s vice president of product marketing, tells Infosecurity’s editor, Eleanor Dallaway, that in addition to the constant tide of cybercrime, it’s huge amounts of data that are driving this industry.
Adobe issues security updates for Flash, hotfix for ColdFusion
Three security bulletins were released this week by Adobe outlining security updates for Flash Player, ColdFusion, and Flash Media Server.
Hackers are winning the cat-and-mouse game against anti-virus programmers
Ever since malware writers swapped worldwide infamy for hefty profits, they have become a larger problem to deal with. And, says Ron Clarkson, senior vice president of CoreTrace Corporation, as the game of cat-and-mouse with anti-virus software programmers continues, hackers remain one step ahead of their chief nemesis.
E-crime victim charity to close
Veteran technology professional Jennifer Perry has announced that E-Victims.org, the charity she helped to found three years ago and which assists victims of electronic crime on the internet, is to close due to lack of funding.
How to take down rogue ISPs
McAfee has released the sixth edition of its security journal and has been fortunate enough to have a feature contribution from ex-Washington Post IT security writer Brian Krebs, who has written about his experiences in taking down ISPs and botnets that support cybercriminal activity.
German government looking to dump BlackBerry and other smartphones
Reports are coming in that the German government is becoming concerned over the security of the 'push' email features of several popular smartphones, including the RIM BlackBerry and the Apple iPhone.
