Hi, what are you looking for?
A few months ago, I was at a round table luncheon with a few senior-level security and IT folks. I casually asked them what they were doing to secure their Web applications. They replied with full confidence, “We have SSL.” When I described, in detail, how hackers attack via Web applications, and how SSL doesn’t protect them against those attacks, they were shocked. I can understand that small website owners might not have an in-depth knowledge of security issues. But,...
It is no secret malware kits have been the source of many of the infections plaguing users in recent years. This trend is epitomized by Poison Ivy, a remote administration tool (RAT) at the heart of the Nitro attacks targeting the chemical and defense industries.In a new research paper, Microsoft chronicled how Poison Ivy works and why it continues to be utilized by attackers. For one thing, the tool is available for free.
Visibility and Context-awareness are Critical to Staying Ahead of ThreatsThe term “Next-Generation” is frequently used in the industry to signal that a new technology has made a sufficient leap forward, delivering efficiencies or effectiveness previously considered impossible for a product.
In an effort to combat the growing threat of financial loss through ATM Skimming, ATM maker Diebold has re-engineered components in some of its ATMs, including a re-engineered bezel and has launched a service to detect and prevent skimming activity.
In the third quarter of 2011, PandaLabs, Panda Security's malware research laboratory, said five million new malware samples were created, which, according to my math, breaks down to about 55,000 per day. It’s not news new to report that malware continues to be cranked out and an alarming rate.
The European Network and Information Security Agency (ENISA), Europe’s cyber security agency, and the U.S. Department of Homeland Security are conducting the first ever joint cyber security exercise today in Brussels.
Secunia has rolled out the “Secunia Vulnerability Coordination Reward Program” (SVCRP), a new program that aims to benefit both the IT community and end-users by uncovering and helping to resolve previously unreported bugs.
Quarri Technologies, a firm that focuses on secure browsing sessions, has received $3M in Series B funding from the Houston Angel Network (HAN) which it will use to expand it’s presence in the North American market.
The U.S. Navy has continued to push forward on plans to secure remote access and identity management mandates, by purchasing more MobiKEY Fusion devices and TruOFFICE licenses from Route1.
New data from Internet Identity (IID), taken from its quarterly eCrime report, says that the jump in the number of websites hosting malware, as well as a stronger focus on targeted phishing attacks, is causing cybercriminals to shift gears.
EMC today announced the availability of EMC SourceOne eDiscovery – Kazeon 4.6, the company’s eDiscovery solution that helps corporations, legal service providers, law firms and consultants provide eDiscovery, litigation support and other investigations.
Defending Against Attacks Requires Good Technology, But Companies Must Also Have Effective Management Systems and Best Practices in Place.
Duqu Installer Exploited Windows Zero-Day to Infect SystemsTaking another page from Stuxnet, it seems the attackers behind Duqu used a Microsoft Windows zero-day as part of their attack campaign.
Report Indicates Many Organizations Not Adequately Prepared for Persistent APT Onslaught
Saying you’re secure is one thing; having the metrics to prove it is another, particularly when it comes to justifying security budgets.Having metrics to focus on can make these conversations easier, security pros say.
Typosquatting is no longer a risk to be delegated entirely to brand managers in the legal and marketing departments.
Check Point Software Technologies is set to acquire governance, risk management and compliance (GRC) vendor Dynasec to help customers handle regulatory requirements.According to Check Point, the buy will bolster 3D Security, Check Point’s vision for combining policies, people and enforcement in the name of security. The financial terms of the deal are not being made public. However, Check Point did give hints regarding its plans for the new acquisition.
It won’t be long before attackers discover that your home automation system is connected to everything.
Internet security firm Bitdefender announced the availability of its new cloud-based endpoint security offering this week.Designed to deliver the benefits of an on-premise enterprise security solution, “Cloud Security for Endpoints by Bitdefender” is built to provide a simple and flexible solution to protect end-user systems and servers without the overhead of additional software, hardware and IT staff.
At Least 48 Companies Targeted in Cyber Attacks Across Several IndustriesAttackers have been targeting chemical and defense companies around the world in a cyber-campaign designed to steal information.
The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
A total of 22 patches were releaased, a majority for code execution, privilege escalation, and information disclosure vulnerabilities.
The Daybreak initiative will provide subsidized AI cyber capabilities, training and technical assistance, though OpenAI has disclosed few details about costs and eligibility.
