Security Experts:

long dotted

NEWS & INDUSTRY UPDATES

Twitter said it was stepping up security measures for the popular messaging service following a series of high-profile breaches by hackers hitting media organizations and others.
The U.S. Department of Homeland Security (DHS) is developing a system that will enable classified vulnerability data to be shared with the private sector.
Yahoo Japan suspects up to 22 million user IDs may have been stolen during an unauthorised attempt to access the administrative system of its Yahoo! Japan portal.
The Washington State Administrative Office of the Courts (AOC) said on Thursday that a public Web server (www.courts.wa.gov) containing sensitive information operated by the Office was hacked.
Domain registrar Name.com sent an email to all of their customers, disclosing a security incident that may have compromised some sensitive information.
A bi-partisan group of Senators introduced a new bill to fight cyber-espionage and intellectual property theft by foreign countries.
China is engaged in widespread cyber espionage in a bid to extract information about the US government's foreign policy and military plans, said a Pentagon report.
Dave Piscitello outlined some essential tasks for organizations to take should they find themselves the victim of a DDoS. Regardless of the reason for the attack, speed is the one thing that will make all the difference in mitigation and recovery.
Daily deals site LivingSocial, said on Friday that it had fallen victim to a cyber attack that put its roughly 50 million users are risk.
A report from the Ponemon Institute shows that many businesses are not prepared when it comes to forensics and customer notification in the aftermath of a breach.

FEATURES, INSIGHTS // Incident Management

rss icon

Mark Hatton's picture
Despite the billions of dollars spent annually by government and private industry to protect their networks and critical data assets, the large majority of breaches can be tied directly to human error and/or a breakdown in protocol.
Rod Rasmussen's picture
In order to win the war with today’s cybercriminals that are using the same attack vectors on a massive scale, a real-time, automated information platform that pre-empts ongoing attacks is an imperative.
John Vecchi's picture
Understanding the various types of malicious actors targeting your networks, including their motivations and modus operandi, is key to identifying, expelling and expunging them.
Ryan Naraine's picture
In this podcast, Greg Hoglund talks to Ryan Naraine about the inner workings of APT attack campaigns, the legal issues around hacking-back against adversaries and why the industry needs to be more aggressive to thwart the theft of intellectual property.
Mark Hatton's picture
One of the more interesting cyber security phenomenons I’ve witnessed recently is not only the willingness of CEOs to admit that their company has suffered a breach, but the enthusiasm in which they have shown in making the admission.
John Vecchi's picture
Botnets are frequently found on today’s corporate networks. A growing number of the infections caused by botnets are in fact symptoms of an advanced targeted attack.
Gant Redmon's picture
Just like travel, incident response is a business responsibility. You need to understand and practice your plans, your responsibilities, your points of engagement and the tools you have at your disposal, to meet your goals in the most effective way.
Marc Solomon's picture
In this business we must ask ourselves every day, “Are we prepared in the event of a malware attack?” Many believe the answer is “No.”
Tal Be'ery's picture
The South Carolina Department of Revenue attack went unnoticed because the security team was not able to monitor and control data access across internal network and servers, making them blind to the attack.
Chris Poulin's picture
There’s no one size fits all disaster survival plan: a server compromise is vastly different than full scale nuclear attack, and both require situationally appropriate responses.