Security Experts:

long dotted

NEWS & INDUSTRY UPDATES

The Internal Revenue Service has addressed some of the security issues in its IT infrastructure, but it still has a long way to go, the Government Accountability Office said in a new report.
TripWire, announced that would acquire nCircle, a provider of information risk and security performance management solutions.
Skyhigh Networks, a Cupertino, California-based startup offering cloud visibility and control solutions, on Monday emerged from stealth mode and officially launched its new solution designed to help enterprises know which cloud services their employees use.
NT OBJECTives launched NTOSpider 6.0, the latest version of its web application scanner, which now enables security teams to scan for vulnerabilities in mobile, web services and CSRF protected sites that make use of modern application technologies.
While some say the specifics on what information should be shared and when are just one example of the things missing from the executive order that should be part of legislation, others believe a new law may not be the answer.
San Jose, California-based Zscaler added new analytics technology to its cloud security suite designed to provide enterprise security teams with real-time visibility into employee Internet activity.
The PCI Security Standards Council released the PCI DSS Cloud Computing Guidelines Information Supplement.
Zaxby's Franchising, the restaurant chain best known for high calorie meals like fried chicken and Texas toast, is the latest company to have systems associated with its point of sale systems compromised by malware.
Dell SecureWorks announced on Monday that they were launching a new Vulnerability Management Service (VMS) and Web Application Scanning service (WAS).
US regulators have launched a series of probes on whether mobile apps targeted at children violate privacy laws by collecting and sharing data which can be used for detailed profiles.

FEATURES, INSIGHTS // Compliance

rss icon

Jon-Louis Heimerl's picture
The Omnibus Rule that updated the Health Insurance Portability and Accountability Act (HIPAA) has the potential to be a game changer because of the things it says in writing, as well as some of the things that it doesn’t say.
Dr. Mike Lloyd's picture
2012 was an interesting year in security – publicity around breaches led to greater awareness than we’ve seen in years, encouraging many in the Federal sector to look into our corner of IT. So what will happen in IT Security 2013?
Dr. Mike Lloyd's picture
Santa doesn’t care if you were naughty or nice on Christmas Eve – what matters is how you did all year. Security is much the same.
Gant Redmon's picture
You can have security without privacy, but you cannot have privacy without security. To have privacy, you must have security to protect things you wish not to share from those who are interested...
Gant Redmon's picture
Data breach notification laws are confusing and ever changing. Legislators trying to harmonize all the different state breach notification laws are going to have three big political challenges.
Chris Hinkley's picture
As e-commerce ramps up again in advance of the holiday season, businesses need to take mobile payments security seriously. Here are three ways to protect your customers’ information when accepting mobile payments.
Marc Solomon's picture
To combat the risks associated with web applications, one of the most significant evolutions in network security over the last few years has been the advent of application control.
Danelle Au's picture
You’ve handed over controls to a third-party, so how do you implement the right levels of security in a cloud environment, trust the provider to take care of the rest, and still meet compliance initiatives?
Chris Poulin's picture
Part 1: Why the Star Trek Medical Tricorder Didn’t have an App Store. The future of information security is looking brilliant: by the 23rd century there will be no computer hacks—at least according to Star Trek.
Jeff Hudson's picture
The latest iteration of PCI compliance regulations adds to the already increasing burdens of the typical IT security professional. For example, exposing cryptographic key management information to more than those that need to know creates a compliance violation.