Mobile Version Subscribe Contact Us About Us Advertising Editorial SC UK SC Aus/NZ

RSS | Login | Register

Data Loss Prevention

IBM develops a way to process encrypted data

Chuck Miller June 25, 2009

A researcher at IBM has developed a way to analyze encrypted data without decoding it.

Security can drive business, Microsoft survey finds

Angela Moscaritolo June 24, 2009

Information security presents a unique set of challenges, but it also can enable business, a new Microsoft survey says.

Survey: CISOs worried about insiders, data breaches

Angela Moscaritolo June 23, 2009

Eighty percent of CISOs believe their company's own employees and contractors are the greatest threat to company data, according to a new study.

Army ends ban on Facebook, Flickr, other social media sites

Angela Moscaritolo June 11, 2009

Updated: Certain U.S. Army bases that formerly blocked access to Web 2.0 sites now permit users to surf to sites such as Facebook and Flickr.

Study finds IT security pros cheat on audits

Angela Moscaritolo May 27, 2009

IT security professionals might think of auditing as a pain, but some are actually cheating to get audits passed, according to a study released Wednesday.

Experts offer tips to deal with Gumblar malware

Chuck Miller May 21, 2009

A number of security organizations are offering tips to deal with the Gumblar drive-by exploit, which is growing ever more pervasive.

GAO report finds security lagging at federal agencies

Dan Kaplan May 21, 2009

Federal agencies continue to be lax in their implementation of information security programs, according to a new report from the Government Accountability Office.

Social Security Administration spoofed in phishing scam

Angela Moscaritolo May 11, 2009

Scammers have spoofed the Social Security Administration's website in a phishing scam targeted at those who will be receiving an economic recovery payment this month.

U.S. missile defense information found in disk bought on eBay

Angela Moscaritolo May 07, 2009

A hard disk containing the launch procedures for a U.S. military missile defense system was recently purchased on eBay.

"Online 911" created to diagnose and deal with cybercrime

Angela Moscaritolo April 28, 2009

McAfee has launched a free Cybercriminal Response Unit (CRU), meant to be an "online 911" where cybercrime is diagnosed and treated.

PCI expands security testing

Chuck Miller April 24, 2009

The PCI Security Standards Council has expanded its PIN entry device security requirements program to two new types of devices: Unattended payment terminals (such as ticket kiosks) and hardware security modules (used for card personalization and PIN translation). The devices can now be rigorously tested for approval by the Council's labs to ensure compliance with PCI Standards, according to a statement. — CAM

Corporate users increasingly skirt security infrastructures

Angela Moscaritolo April 16, 2009

In a recent assessment, organizations had an average of 156 applications traversing their networks -- some of which pose a danger to the organization.

Cyberattack repairs cost Pentagon $100 million in six months

Angela Moscaritolo April 08, 2009

The Pentagon has spent more than $100 million in the past six months repairing damage to its networks caused by cyberattacks, according to military officials.

Realtors hack competitor email

Angela Moscaritolo April 07, 2009

Three real estate agents in Rockingham, N.C. were charged with illegally accessing a Hotmail account belonging to the employee of a competitor. RE/MAX Tri City Realty agents Wendy Robson Massagee, 43; Kim Dawn Whitley, 40; and Jamie Moss-Godfrey, 41, allegedly used the victim's username and password to access the account and view work-related emails, according to a report in the Richmond County (N.C.) Daily Journal. All three were released and are scheduled to appear in local court on April 23. - AM

Tenn. welfare worker charged

Angela Moscaritolo April 07, 2009

A former child support services worker in Tennessee was arrested after selling the personal information of approximately 1,600 people to an undercover state crime investigator. Steven Gilmore, 27 of Nashville worked for Policy Studies, a private company that operates child support programs, where he had access to personal data. A federal criminal complaint alleges that on three occasions Gilmore sold a total of 35 names, birth dates, and Social Security numbers, according to a news release from the Tennessee Bureau of Investigation. — AM

Octomom's hospital records accessed, 15 workers fired

Angela Moscaritolo March 31, 2009

Kaiser Permanente Bellflower Medical Center recently fired 15 hospital workers for accessing the medical records of octuplet mother Nadia Suleman without permission.

FBI: Internet crime rising

Chuck Miller March 31, 2009

Internet crime complaints made to the FBI rose by 33 percent in 2008, and the total monetary losses that were reported rose by 10.8 percent, according to the 2008 Internet Crime Report, published by the Internet Crime Complaint Center, or IC3. For the losses reported, the individual average crime netted $931 for the crooks. The total complaint number hit 275,284, amounting to $265 million. — CAM

Privacy group urges FTC to investigate Google's cloud services

Angela Moscaritolo March 18, 2009

The Electronic Privacy Information Center, a privacy advocacy group, filed a complaint with the Federal Trade Commission on Tuesday urging an investigation of Google's cloud computing services to determine the adequacy of its privacy and security safeguards.

Web apps account for 80 percent of internet vulnerabilities

Angela Moscaritolo March 18, 2009

Vulnerabilities in web applications made up 80 percent of all web-related flaws in the second half of 2008 and rose in prevalence by about eight percent from the first half of the year.

Senatorial campaign data breach documents leaked

Chuck Miller March 11, 2009

The campaign of Norm Coleman, the Minnesota Republican senator locked in a vicious recount battle to retain his seat, told political donors on Wednesday that they should cancel their credit cards after financial information of contributors was posted online.

P2P legislation would build security awareness among users

Dan Kaplan March 09, 2009

Peer-to-peer security awareness is back on Congress' agenda with the introduction of legislation that would require notice and consent when installing the software.

Google's glitch in the cloud

Chuck Miller March 09, 2009

Google Docs, a web-based word processor, experienced a glitch that shared documents without permission.

Conficker worm variant kills security processes

Chuck Miller March 06, 2009

Computer systems that are already infected by the Conficker worm are being pushed a new component that kills protective security processes.

Background investigator settles with FTC over ID theft

Greg Masters March 05, 2009

An organization that sells consumer information, including names, Social Security numbers, credit card numbers and credit histories, has settled Federal Trade Commission charges that it failed to properly screen potential customers, leading to the sale of at least 318 reports to ID thieves.

Firefox update addresses multiple security issues

Angela Moscaritolo March 05, 2009

Mozilla on Wednesday issued Firefox 3.0.7, which fixes multiple security issues that could potentially enable an attacker to run arbitrary code on a victim's computer, cause a denial-of-service condition, obtain sensitive information, or spoof the location bar, according to an advisory from US-CERT Thursday.

Blueprints of Obama's Marine One helicopter leaked on P2P

Angela Moscaritolo March 02, 2009

The blueprints for President Obama's helicopter, Marine One, were downloaded from a peer-to-peer (P2P) network and onto a computer in Tehran, Iran, a file-sharing monitoring company has revealed.

Insider data theft exacerbated by economic crisis

Angela Moscaritolo February 24, 2009

The majority of individuals laid off, fired or changing jobs in the last 12 months stole data from their former employer, according to a new survey from the Ponemon Institute and Symantec.

Report: Privacy issues plague cloud computing

Angela Moscaritolo February 24, 2009

Before turning to cloud computing applications to conduct business, enterprise executives should think twice about the potential for exposure of corporate secrets or legal liabilities, according to a new World Privacy Forum report.

Microsoft says password stealers pose biggest threat

Angela Moscaritolo February 23, 2009

The top two threat families on Microsoft's detection and removal list this month are online game password stealers. These threats are now predominantly occurring in the United States -- a shift from last June when they mostly were detected in China.