Stories about lost wages aren't the only scary things being talked about in Sin City this week. The best security researchers and hackers from around the world have gathered in Las Vegas, and news about their work has been creeping out like a toxic flood.
Christina DesMarais | 07 Aug | Read more
If you'd never heard the phrase 'advanced persistent threat' before, you may have gotten an ear full of it the past week in a collection of news stories that used the APT term to describe a variety of network security problems that are causing big problems.
Ellen Messmer | 06 Aug | Read more
RSM Bird Cameron’s director of information security, Jo Stewart-Rattray, has picked up the coveted National ICT Professional of the Year gong at the 2011 iAwards in Melbourne.
PureWAF, an Australian-developed managed firewall service designed to protect web applications, won the security section of the national iAwards last night for its developers, information security consultancy Pure Hacking.
Stilgherrian | 05 Aug | Read more
As a CSO and CIO you may be wondering why I crafted a diagnostic related to understanding your most critical web products. The original purpose of the diagnostic was to discern which applications and how applications are ported successfully to a service provider's cloud. The diagnostic determines which cloud IaaS products (storage components, network components, and virtualization machines) are needed for an application. It addresses the platform components (server/operating system and web server) in the PaaS layer. Lastly, it focuses on the SaaS software application.
Gregory Machler | 05 Aug | Read more
LAS VEGAS --Warnings about emerging cyberthreats shouldn't be treated with the same skepticism that many government officials showed toward the alarms sounded prior to the Sept. 11, 2001, terrorist attacks, warned a leading counter-terrorism at the BlackHat security conference here Wednesday.
Jaikumar Vijayan | 04 Aug | Read more
Section 922 of the Dodd-Frank Wall Street Reform and Consumer Protection Act --- increasing the protection for whistleblowers -- amends the Securities and Exchange Act of 1934 by allowing the Securities and Exchange Commission to offer awards to individuals providing original information about a violation of federal securities regulations. Next Friday, on Aug. 12, <a href="http://www.gpo.gov/fdsys/pkg/BILLS-111hr4173enr/pdf/BILLS-111hr4173enr.pdf">these whistleblower provisions</a> go into effect.
Karen M. Kroll | 03 Aug | Read more
John Suffolk, the government's former chief information officer, has been appointed global security officer at telecoms firm Huawei.
Search engine poisoning, social networking scams and fake anti-virus have been the top security threats in 2011 so far, according to security vendor Sophos. All three rely on social engineering to achieve their aims.
Stilgherrian | 02 Aug | Read more
Have you got great ideas for combatting cyber crime? The organisers of the 3rd annual eCrime Symposium in Canberra are seeking keynote speakers and subject experts for a panel discussion.
Among the thousands of security experts at the Black Hat, Defcon and Security BSides conferences next week in Las Vegas, some will surely test whether they can break into nearby laptops, phones, networks -- even RFID-enabled room keys and credit cards.
Tim Greene | 30 Jul | Read more
I'm a big fan of search. The ability to use the Internet to cull information on virtually any topic with just a few clicks has made me more efficient and better informed. And "information" can come in the form of pictures, documents, videos, news feeds -- whatever you need.
Mathias Thurman | 19 Jul | Read more
The Council of Europe Convention on Cybercrime is further entrenched as the key international legal instrument for tackling online crime following the third annual Quintet meeting of Attorneys-General in Sydney this week.
Stilgherrian | 17 Jul | Read more
Sony's president of network entertainment must look at the world through rose-colored glasses because he describes the hacking that took down the PlayStation Network as "a great learning experience."
Brennon Slattery | 15 Jul | Read more
Lawyers for WikiLeaks founder Julian Assange finished their arguments on Wednesday in London's High Court as to why the WikiLeaks founder should not be extradited to Sweden to face questioning on potential charges of molestation and rape.
Jeremy Kirk | 14 Jul | Read more
Symantec's decision to migrate its managed security services (MSS) customers off RSA’s SecurID tokens is the beginning of a complete phase out, Grant Geyer, Symantec's vice president of global managed security services told CSO.com.au.
Outgoing president of Intel-owned security vendor McAfee, Dave DeWalt, will be replaced by two co-presidents drawn from McAfee's ranks.
The curtain has fallen on the 50 day performance by hacker group LulzSec. Its campaign of mayhem and destruction, peppered with witty commentary captivated the world. In an alternate universe where Lulzcats reign and anti-security is the norm, it might have even earned a spot on its first target, The X-Factor. But on this earth its members may still be captured by its later targets: the CIA, US law enforcement and the FBI.
There's been an incredible number of records breached this year, including:
George V. Hulme | 12 Jul | Read more
Mantra is an open source, browser-based framework for penetration testing and security assessments. It's based on Mozilla's Firefox Web browser, so it's cross-platform, and it's part of the Open Web Application Security Project -- OWASP.
Rohan Pearce | 04 Jul | Read more