Twitter said it was stepping up security measures for the popular messaging service following a series of high-profile breaches by hackers hitting media organizations and others.
The U.S. Department of Homeland Security (DHS) is developing a system that will enable classified vulnerability data to be shared with the private sector.
Yahoo Japan suspects up to 22 million user IDs may have been stolen during an unauthorised attempt to access the administrative system of its Yahoo! Japan portal.
The Washington State Administrative Office of the Courts (AOC) said on Thursday that a public Web server (www.courts.wa.gov) containing sensitive information operated by the Office was hacked.
Domain registrar Name.com sent an email to all of their customers, disclosing a security incident that may have compromised some sensitive information.
China is engaged in widespread cyber espionage in a bid to extract information about the US government's foreign policy and military plans, said a Pentagon report.
Dave Piscitello outlined some essential tasks for organizations to take should they find themselves the victim of a DDoS. Regardless of the reason for the attack, speed is the one thing that will make all the difference in mitigation and recovery.
A report from the Ponemon Institute shows that many businesses are not prepared when it comes to forensics and customer notification in the aftermath of a breach.
Despite the billions of dollars spent annually by government and private industry to protect their networks and critical data assets, the large majority of breaches can be tied directly to human error and/or a breakdown in protocol.
In order to win the war with today’s cybercriminals that are using the same attack vectors on a massive scale, a real-time, automated information platform that pre-empts ongoing attacks is an imperative.
Understanding the various types of malicious actors targeting your networks, including their motivations and modus operandi, is key to identifying, expelling and expunging them.
In this podcast, Greg Hoglund talks to Ryan Naraine about the inner workings of APT attack campaigns, the legal issues around hacking-back against adversaries and why the industry needs to be more aggressive to thwart the theft of intellectual property.
One of the more interesting cyber security phenomenons I’ve witnessed recently is not only the willingness of CEOs to admit that their company has suffered a breach, but the enthusiasm in which they have shown in making the admission.
Botnets are frequently found on today’s corporate networks. A growing number of the infections caused by botnets are in fact symptoms of an advanced targeted attack.
Just like travel, incident response is a business responsibility. You need to understand and practice your plans, your responsibilities, your points of engagement and the tools you have at your disposal, to meet your goals in the most effective way.
The South Carolina Department of Revenue attack went unnoticed because the security team was not able to monitor and control data access across internal network and servers, making them blind to the attack.
There’s no one size fits all disaster survival plan: a server compromise is vastly different than full scale nuclear attack, and both require situationally appropriate responses.