Security

Find network and information security news, reviews and analysis, covering data protection, privacy, endpoint security, and security management.

Certificate Authorities form group to push for better certificate-revocation checking

Posted February 14, 2013 - 4:57 pm

Several Certificate Authorities (CAs) have formed an advocacy group called the Certificate Authority Security Council (CASC), which will focus on promoting new security standards, policies and best practices for SSL (Secure Sockets Layer) deployment on the Web.
- Quick Read
Lawmakers, business execs defend privacy in CISPA

Posted February 14, 2013 - 3:21 pm

Privacy and digital rights groups are overstating the privacy concerns in a controversial cyberthreat information bill introduced this week in the U.S. Congress, the bill's sponsors and leaders of some business groups said.
- Quick Read
ITwhirled RSS

Why recover from disaster when you can avoid it?

Posted February 14, 2013 - 2:33 pm

Sidestepping technology disasters is much easier -- and affordable -- now for businesses large and small.
- Quick Read
Microsoft preps for Pwn2Own with record-setting IE updates

Posted February 14, 2013 - 2:10 pm

IE9, IE10 face hackers in three weeks when $175,000 is up for grabs at annual contest.
- Quick Read
Obama executive order redefines critical infrastructure

Posted February 14, 2013 - 1:40 pm

President Barack Obama's cybersecurity executive order, signed on Tuesday, could significantly expand the list of companies categorized as part of U.S. critical infrastructure sector, security experts said Wednesday.
- Quick Read
Adobe confirms zero-day exploit bypasses Adobe Reader sandbox

Posted February 14, 2013 - 9:55 am

A recently found exploit that bypasses the sandbox anti-exploitation protection in Adobe Reader 10 and 11 is highly sophisticated and is probably part of an important cyberespionage operation, the head of the malware analysis team at antivirus vendor Kaspersky Lab said.
- Quick Read
EU cybersecurity agency warns about over-reliance on cloud

Posted February 14, 2013 - 9:08 am

Europe's top cyber security agency warned on Thursday that the growth in cloud computing is a “double-edged sword”.
- Quick Read
Targeted online attacks rise against Uyghur minority

Posted February 14, 2013 - 12:24 am

Two security vendors have detected an uptick in targeted malicious software attacks against the Uyghur community, an ethnic group in western China that has long campaigned for greater independence from Beijing.
- Quick Read
Spanish police break up €1 million ransomware crime ring

Posted February 13, 2013 - 8:37 pm

Spanish police say they've broken up a crime ring that extorted money from Internet users by accusing them of viewing child pornography or terrorist-related materials and demanding fines.
- Quick Read
White Paper

File Sharing Beyond the Firewall

Posted February 13, 2013 - 7:00 pm

Learn how to provide local file access outside with any computer or mobile device outside the firewall, without the need for VPN. See why cloud-enabled storage is the next generation of file sharing infrastructure
- Quick Read
Lawmakers reintroduce cyberthreat information-sharing bill

Posted February 13, 2013 - 4:57 pm

Two U.S. lawmakers have reintroduced a controversial cyberthreat information-sharing bill over the objections of some privacy advocates and digital rights groups.
- Quick Read
Question

How often should you conduct penetration testing?

Posted February 13, 2013 - 4:56 pm

What is a good rule of thumb to follow for penetration testing for IT security? How often is sufficient vs. being a waste of resources?
- Quick Read
Emergency Alert System devices vulnerable to hacker attacks, researchers say

Posted February 13, 2013 - 3:40 pm

Devices used by many radio and TV stations to broadcast emergency messages as part of the U.S. Emergency Alert System (EAS) contain critical vulnerabilities that expose them to remote hacker attacks, according to researchers from security consultancy firm IOActive.
- Quick Read
White Paper

TCO & Security of Enterprise Grade Mobility

Posted February 13, 2013 - 12:45 pm

In this whitepaper, Strategy Analytics present the findings of extensive research into the total cost of ownership (TCO) and security for the major mobile platforms.
- Quick Read
White Paper

Mitigating DDoS Attacks with F5 Technology

Posted February 13, 2013 - 12:45 pm

This document examines various DDoS attack methods and the application of specific ADC technologies to block attacks in the DDoS threat spectrum while securely delivering applications and protecting the network, the session, and the user.
- Quick Read
White Paper

Vulnerability Assessment with Application Security

Posted February 13, 2013 - 12:45 pm

This document examines various DDoS attack methods and the application of specific ADC technologies to block attacks in the DDoS threat spectrum while securely delivering applications and protecting the network, the session, and the user.
- Quick Read
White Paper

Solving Substantiation with SAML

Posted February 13, 2013 - 12:45 pm

Read this paper to learn how F5 uses SAML to effectively enable secure web domains to exchange user authentication and authorization data, providing users of web browsers with single sign-on (SSO) convenience they need.
- Quick Read
White Paper

The Application Delivery Firewall Paradigm

Posted February 13, 2013 - 12:45 pm

Learn how you can effectively combat these modern attacks with a new firewall paradigm that protects the datacenters and ensures reliability.
- Quick Read
White Paper

An Effective Approach to Addressing the 3 Primary Threat Vectors

Posted February 13, 2013 - 12:45 pm

Learn how you can effectively combat these modern attacks with a new firewall paradigm that protects the datacenters and ensures reliability.
- Quick Read
White Paper

A Model for Effective Persistent Threat Management

Posted February 13, 2013 - 12:45 pm

Persistent Threat Management is a new operational model that takes advantage of integration and automation capabilities between vulnerability scanning services and web application firewalls.
- Quick Read
Zero-day PDF exploit affects Adobe Reader 11 and earlier versions, researchers say

Posted February 13, 2013 - 10:57 am

Researchers from security firm FireEye claim that attackers are actively using a remote code execution exploit that works against the latest versions of Adobe Reader 9, 10 and 11.
- Quick Read
Obama cybersecurity order lacks bite, security experts say

Posted February 13, 2013 - 10:27 am

Scaled back order a good start, but comprehensive bipartisan legislation is essential to prevent cyberattacks.
- Quick Read
Symantec SSL certificates feature cryptography 10k times harder to break than RSA-bit key

Posted February 13, 2013 - 8:16 am

Symantec today began offering multi-algorithm SSL certificates for Web servers that go beyond traditional crypto to include what's known as the Elliptic Curve Cryptography (ECC) Digital Signature Algorithm (DSA), which the firm says will be 10,000 times harder to break than an RSA-bit key. Certificates are used to prove site identity to the visitor through a validation check that involves the user's browser and the site certificate, and Symantec is making the argument that authentication will happen faster using this particular ECC algorithm.
- Quick Read
Obama signs cybersecurity order

Posted February 12, 2013 - 11:25 pm

U.S. President Barack Obama has signed an executive order requiring federal agencies to share cyberthreat information with private companies and to create a cybersecurity framework focused on reducing risks to companies providing critical infrastructure.
- Quick Read
Obama live stream unaffected despite Anonymous threats

Posted February 12, 2013 - 11:18 pm

Anonymous failed to disrupt the White House's online video stream of President Barack Obama's State of the Union address on Tuesday night.
- Quick Read

May is...
Cloud Month

BY THE NUMBERS: Cloud computing

CAREER: Top cloud jobs

MANAGEMENT: Cost battle: Cloud computing vs. in-house IT

REVIEW: 4 killer cloud IDEs

DEVELOPMENT: When to use cloud platforms vs. dedicated servers

SLIDESHOW: Top 10 cloud tools for IT pros

Learn more

SecurityWhite Papers & Webcasts

White Paper

Meet your Dodd-Frank recordkeeping compliance requirements

White Paper

Social Media and the Shifting Information Compliance Landscape

White Paper

Best Practices for Cloud-based Information Governance

See more White Papers | Webcasts

Join today!

Get FREE access to premium content, in-depth reviews, practical tips

6 IT hiring tips to weed out the duds
Rule #1: Don't hire out of desperation.
4 free tools to simulate a cloud connection
Linux-based WAN emulation tools worth a look.
15 common IT resume mistakes (and how to avoid them)
Learn how to build a better resume.