Security Experts:
Fahmida Y. Rashid
Fahmida Y. Rashid is a contributing writer for SecurityWeek. She has experience writing and reviewing security, core Internet infrastructure, open source, networking, and storage. Before setting out her journalism shingle, she spent nine years as a help-desk technician, software and Web application developer, network administrator, and technology consultant.
Recent articles by Fahmida Y. Rashid
-
Researchers found malware which acts as a backdoor for Mac OS X on a computer belonging to an activist attending the Oslo Freedom Forum this week.
-
Despite four takedowns in five years, PushDo is back, complete with new features designed to make the botnet more resilient and elusive, researchers said.
-
Cyber-criminals are actively updating the Travnet malware and improving the botnet's infrastructure to boost its document-stealing capabilities.
-
Researchers have uncovered a targeted attack against political rights activists in China in which a malicious Word document exploits a vulnerability in Microsoft Office to take control of the victim computer.
-
The ISO/IEC 27034-1 offers a "common validation language" for security development practices and offers organizations a clear and simple outline for adopting a security development framework.
-
Non-profit organization SAFECode unveiled a series of new training modules to help enterprises train software developers in-house to write secure code.
-
A bi-partisan group of Senators introduced a new bill to fight cyber-espionage and intellectual property theft by foreign countries.
-
Organizations underestimate how cyber-attackers can take advantage of privileged accounts for malicious purposes, according to a new survey.
-
Cyber-criminals are increasingly setting up shop in Latin American and the Caribbean to take advantage of low security awareness among users and ineffective law enforcement, according to a recent report from Trend Micro.
-
Several media sites, including two Washington, DC-based radio stations, have been compromised to infect unsuspecting visitors' systems with fake antivirus software.
-
Smaller open source projects tend to be more secure than proprietary applications, but the opposite is the case for software with more than a million lines of code, according to a new report from Coverity.
-
Cisco has expanded its "smart grid" portfolio with specialized networking equipment to help power-generation utilities modernize and secure the electrical grid.
-
A new version of the Java exploit kit g01pack has added a second stage to the exploit process in order to bypass detection by antivirus tools, security researchers have found.
-
While some best practices such as software security training are effective in getting developers to write secure code, following best practices does not necessarily lead to better security, WhiteHat Security found.
-
U.S. intelligence agencies believe Chinese hackers recently accessed a database containing sensitive infrastructure data.
-
The United States' Department of Labor's Website has been breached and is serving up malware in drive-by-download attacks, security researchers warned.
-
Even though most cyber-incidents tend to be external attacks, organizations should not underestimate the likelihood of a malicious insider stealing sensitive information or sabotaging internal systems.
-
In a recent survey, Sonatype found that 71 percent of production applications contained components which had known security flaws classified as severe or critical.
-
Spam messages claiming to link to an invoice, shopping receipt, airline ticket, or some other type of confirmation document was the predominant mode of malware distribution in April, Solera Networks said.
-
Oracle has decided to delay the release of Java 8 in order to address fundamental security concerns for the beleaguered technology.
-
Despite security issues such as lost or stolen devices or malicious attacks on the mobile device, businesses believe the benefits of mobility are worth the risks, Symantec found in a recent survey.
-
Attackers are exploiting a vulnerability, which was patched a year ago, in the control panel to successfully gain access to the Web server and upload malicious Apache modules.
-
Malware and attackers are increasingly targeting privileged accounts as part of multi-stage operations where they breach networks, gather information, and exfiltrate sensitive data.
-
Organizations hoping distributed denial of service attacks are no longer incidents du jour and are beginning to slow down can think again: there were more attacks in 2012 and they aren't going away, according to Neustar.
-
FireEye identified C&C servers in over 180 countries communicating with infected machines, and tracked more than 12 million malware communication callbacks across hundreds of thousands of infected enterprise hosts.
Subscribe to SecurityWeek
- Yahoo Japan Suspects 22 Million IDs Stolen
- US Authorities Seize Bitcoin Operator Accounts
- Saudi Reports Attacks on Government Websites
- Italian Police Raid Hackers Who Took on Vatican
- Britain's Financial Times 'Hacked by Syrians'
- The High Financial Costs of Failed Trust
- ESET Uncovers Cyber Espionage Campaign Targeting Government Agencies in Pakistan
- Malicious YouTube Pages Targeting Chrome Users
- Four Lulzsec Hackers Sentenced to Jail in Britain
- Online Crime Leaves $525 Million Price Tag for Consumers
Copyright © 2013 Wired Business Media. All Rights Reserved. Privacy Policy | Terms of Use