Security

Find network and information security news, reviews and analysis, covering data protection, privacy, endpoint security, and security management.

Microsoft, Oracle, Adobe send patches for Valentine's Day

Posted February 14, 2012 - 4:27 pm

The Valentine's Day 2012 edition of Patch Tuesday is upon us, and Microsoft has come forward with details on the nine bulletins it previewed last week.
- Quick Read
- Like
- Tweet
Senate bill may require 'critical' networks to adopt cyber standards

Posted February 14, 2012 - 4:02 pm

A bill in the U.S. Senate would require operators of so-called critical infrastructure networks to adopt cybersecurity practices if evaluations by the U.S. Department of Homeland Security find their security lacking.
- Quick Read
- Like
- Tweet
Question

How much will the security flaws in Google Wallet set back the transition to "digital wallets"?

Posted February 14, 2012 - 2:05 pm

The security flaw in Google Wallet apparently would allow pretty much anyone with access to your phone, once they got through the screen lock (if it is even used), to gain access to the contents of your prepaid Google card.
- Quick Read
- Like
- Tweet
FBI says social media monitoring won't infringe privacy rights

Posted February 14, 2012 - 12:57 pm

The FBI said its proposed plans to monitor social media sites to improve real-time situation awareness will be fully vetted by the agency's Privacy and Civil Liberties Unit.
- Quick Read
- 1 comment
- Like
- Tweet
Four keys to successful BYOD

Posted February 14, 2012 - 12:25 pm

The bring your own device (BYOD) movement formally advocates use of personal equipment for work and obligates IT to ensure jobs can be performed with an acceptable level of security, but how can risks be addressed given the range of devices used and the fact that you lack control of the end point?
- Quick Read
- Like
- Tweet
Royal Philips Electronics reports Web security breach

Posted February 14, 2012 - 12:24 pm

Health-care technology and lighting vendor Royal Philips Electronics has reported a possible security breach affecting a portion of its website, the company announced Tuesday.
- Quick Read
- Like
- Tweet
Mozilla will ask all certificate authorities to revoke SSL-spying certificates

Posted February 14, 2012 - 12:23 pm

Mozilla plans to ask all certificate authorities to review their subordinate CA certificates and revoke those that could be used by companies to inspect SSL-encrypted traffic for domain names they don't control.
- Quick Read
- Like
- Tweet
Whistleblowing site Cryptome.org infected with drive-by exploits

Posted February 14, 2012 - 7:38 am

Cryptome.org, a website dedicated to disclosing confidential information, was compromised last week and was used to infect PCs running Internet Explorer through drive-by exploits.
- Quick Read
- Like
- Tweet
Spear-phishing stats reveal unexplained holiday spikes

Posted February 14, 2012 - 12:30 am

While phishing attempts against workplace email accounts drop precipitously on Christmas and New Year's Day, as might be expected, such attacks spike dramatically on other holidays, says a report from a security firm. Why is not clear.
- Quick Read
- Like
- Tweet
Free service offers basic enterprise mobile management

Posted February 13, 2012 - 5:28 pm

A free new service lets IT groups quickly set up basic management of corporate and personal mobile devices running Android or Apple iOS.
- Quick Read
- 1 comment
- Like
- Tweet
Building an IDPS without big iron

Posted February 13, 2012 - 3:31 pm

Companies seeking to deploy intrusion detection and prevention systems (IDPS) for network security have traditionally had to rely on proprietary appliances that cost from $15,000 to $50,000. That puts IDPS out of reach for many small to midsize companies, but SaaS-based alternatives might fit the bill.
- Quick Read
- Like
- Tweet
Is your definition of security holding you back?

Posted February 13, 2012 - 3:00 pm

Without a clear definition of security that is consistent through out your team, how can you expect people in your organization to comply?
- Quick Read
- 1 comment
- Like
- Tweet
Security Manager's Journal: Hackers phone home -- on our dime

Posted February 13, 2012 - 2:56 pm

Someone is making calls costing thousands of dollars via the IP telephony setup in a small European office.
- Quick Read
- 1 comment
- Like
- Tweet
Continuous Transaction Monitoring (CTM) protects financial integrity, even when network security inevitably fails

Posted February 13, 2012 - 2:28 pm

Everyone's seen the headlines. TJX. RSA. Playstation Network. Symantec. Major corporations with massive investments in network security reduced to public ridicule and expensive liability by hackers. Even governments aren't immune, as proven by online vigilantes like Wikileaks and Anonymous.
- Quick Read
- 1 comment
- Like
- Tweet
How does mobile device management (MDM) work?

Posted February 13, 2012 - 1:45 pm

Enterprise IT and security teams are stretched thin by the growing number of mobile device types invading the enterprise -- many owned by employees -- the variety of OSs and the sheer volume of mobile apps users are requesting. Questions abound.
- Quick Read
- Like
- Tweet
Anonymous took down CIA.gov Friday, then didn't, then did, then did it again today

Posted February 13, 2012 - 12:47 pm

Anonymous first took credit for the DDOS attack that downed CIA.gov Friday, then said it was just reporting the outage, before discovering it had, actually, been behind the attack. CIA.gov is down again today, though it would be wise to wait to give credit this time.
- Quick Read
- 1 comment
- Like
- Tweet
Hackers probably stole Steam transaction data, Valve says

Posted February 13, 2012 - 11:39 am

Valve has informed users of its Steam online game distribution platform that hackers have probably downloaded encrypted credit card transaction data from a backup database during an intrusion last year.
- Quick Read
- 1 comment
- Like
- Tweet
Cisco's John Stewart on the latest security threats … and what enterprises can do to fight back

Posted February 13, 2012 - 11:17 am

Freelance writer Susan Perschke recently sat down with Cisco Vice President and Chief Security Officer John N. Stewart for an in-depth discussion of the state of enterprise security.
- Quick Read
- Like
- Tweet
Hacked Microsoft online store saved passwords in plain text

Posted February 13, 2012 - 10:56 am

Getting hacked is not good. Getting hacked then outed for keeping customer passwords in plain text is an epic not good.
- Quick Read
- 2 comments
- Like
- Tweet
Microsoft India store hacked, user database exposed

Posted February 13, 2012 - 5:39 am

Microsoft is investigating a "limited compromise" of the company's online store in India, the company said Monday.
- Quick Read
- 2 comments
- Like
- Tweet
Google Wallet suspends prepaid credit card functions

Posted February 12, 2012 - 1:33 pm

Google has suspended prepaid capabilities on credit cards linked to its mobile wallet after a security flaw was exposed.
- Quick Read
- 1 comment
- Like
- Tweet
Netflix pays $9M to settle user-data misuse charges; aims to misuse more data with Facebook

Posted February 12, 2012 - 11:24 am

Netflix has agreed to pay $9 million to settle a suit over its illegally long retention of customer rental records. It is now redoubling efforts to get law changed that keeps it from posting to Facebook lists of the things its customers are renting right now.
- Quick Read
- 1 comment
- Like
- Tweet
How the Phoenix Suns basketball team takes on social media attacks

Posted February 12, 2012 - 7:43 am

Every sport has its fans, and the Phoenix Suns basketball team is finding that use of social networking has become one of the main ways to keep in touch with its fan base -- though it can get dicey when basketball fans across the NBA go a little wild before big games.
- Quick Read
- 1 comment
- Like
- Tweet
Morning countdown: Anonymous proves itself master of the DDoS

Posted February 11, 2012 - 8:00 am

Plus: Who wants to buy LinkedIn?
- Quick Read
- Like
- Tweet
White Paper

Insiders Can Ruin Your Company. Take Action.

Posted February 10, 2012 - 5:00 pm

Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in organizations worldwide. This white paper from NetIQ, discusses key technology solutions that help to prevent and detect insider threats.
- Quick Read
- Like
- Tweet

SecurityWhite Papers & Webcasts

White Paper

Overcome Top 7 Admin Challenges of Active Directory

As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable, enforceable processes that reduces administrative overhead and enables robust, customizable reporting and auditing capabilities. Brought to you by NetIQ.

White Paper

Insiders Can Ruin Your Company. Take Action.

Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in organizations worldwide. This white paper from NetIQ, discusses key technology solutions that help to prevent and detect insider threats.

White Paper

Streamline Compliance and Increase ROI

Streamline, simplify, and automate compliance related activities; especially those that impact multiple business units. This white paper from NetIQ, outlines solutions that will help your business gain the maximum return on investment possible while aligning your compliance programs.

White Paper

X-Ray of the PCI Process-4 Proactive Steps

This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into creating a compliant and secure IT environment. Follow these four proactive steps now before your next audit. Brought to you by NetIQ.

See more White Papers | Webcasts