Security Trends: Archive: March 2010

FBI, DOJ Falling Short on Identity Theft: Report

A new report from the DOJ's Office of the Inspector General says the government is making a big mistake by not making ID theft prevention and prosecution a top priority.

Nonprofit Boosts Network Security with InfoExpress Dynamic NAC

Large non-profit organization, Georgia Legal, uses InfoExpress’ CyberGatekeeper to secure its network of 12 offices throughout the state of Georgia.

Google Warns of New Malware Targeting Vietnamese Activists

In the midst of its standoff with China over censorship, Google details hackers' activity designed to set up a botnet and launch a cyber attack against a very specific target.

Social Media and Security Risks

A Palo Alto Networks report finds that social networking and collaborative applications are pervasive in organizations worldwide.

Data Theft Trojans, Black Market Cybercrime Tools on the Rise

Panda Security's latest report says banker Trojans represent more that 60 percent of new cyber security threats, while traditional viruses are making a comeback.

Data Theft Stings Student Loan Guarantor

More than 3.3 million people with student loans had their names, social security numbers, and other personal information stolen last week after a portable media device was swiped.

Microsoft: IE's Defense in Depth Not Fool-Proof

Microsoft touts 'defense in depth' as an effective deterrent after a white hat hacker last week demonstrated a complete takeover of Windows 7 running Internet Explorer 8.

Security Management on the Cheap

A CA white paper offers advice on streamlining IT security management.

IBM Teams With FAA in Cybersecurity Push

Big Blue lands partnership with FAA to develop novel cybersecurity monitoring systems while it aims to broaden collaboration with the government.

Apple Fixes 53 Security Vulnerabilities in Mac OS X

New Mac 10.6.3 update addresses a long list of security and stability issues.

Microsoft Issues Out-of-Band Internet Explorer Security Patch

Microsoft fixes a gaping security hole in Internet Explorer 6 and 7, plus tosses in fixes for nine other critical security flaws in the same out-of-band patch.

Microsoft to Patch Bugs in IE6 and IE7

Microsoft will ship a patch that fixes a new zero-day flaw in Internet Explorer 6 and 7, driven by the urgency of attacks in the wild--so who's at risk this time?

Facebook Mulls Privacy Implications for Location-Based Data

Social networking site updates privacy policy, including a new framework for dealing with geo-aware data.

Want PC Security? Remove Admin Rights

A new study shows that almost all Microsoft vulnerabilities can be mitigated simply by eliminating administrator privileges from end-users.

How to "Green" Security Compliance

Security consultant Diana Kelley outlines several key areas where enterprises can “green” their security compliance programs.

The Value of Disaster Planning in a Security Policy

Pam Baker outlines the key questions to ask when mapping out a security policy for disaster planning.

Security a Top Priority for CEOs

Study finds that 76 percent of C-level executives now say that securing their business-critical apps is the most important aspect of their data protection program.

Security in the Public Sector

A white paper from IDC Government Insights and Tripwire looks at the challenges of securing public sector IT environments.

Secure Wi-Fi Video On The Battlefield

Network security can be a life or death proposition in a war zone. A new product provides secure wireless HD video in a walkie-talkie-sized device for just those scenarios.

China Top Source of Targeted Malware

Unsolicited e-mails most often target executives responsible for foreign trade and defense policies pertaining to Asian countries, according to Symantec.

IE8, Firefox, Safari, and iPhone Fall to Pwn2own Hackers

As expected, security researchers found exploits in all of the targeted platforms in a contest that put browser security to the test.

Security and the Patching Challenge

A Secunia white paper contends that most users simply aren't willing or able to put in the time required to keep a typical system secure.

Purloined PC Results in Data Theft for Thousands of Students

More than 7,000 Vanderbilt University students had their personal information compromised last month after a thief made off with a professor's desktop computer.

Pwn2Own Hackers Try to Take Down Browsers

This year's hacking contest will put Google Chrome, Apple Safari, Microsoft Internet Explorer, and Mozilla Firefox on the firing line. Should we be worried?

U.S. Faces Cyber Security Gap Without Training, Education

Homeland Security's cybersecurity director, Richard Marshall, warns that universities aren't turning out enough cybersecurity experts and urges greater scholarship funding.

Mozilla Scrambles to Close Firefox Vulnerability

Mozilla patches a critical flaw that a few weeks ago it doubted even existed.

FBI Underboss Says Cyber Criminals the New Mafia

Deputy Assistant FBI Director Chabinsky describes growing professionalization, specialization in cyber crime that has led to emerging class of "career criminals."

Cloud Security Challenges and Benefits

A Microsoft white paper looks at the security and privacy issues surrounding cloud computing.

Seattle and Boston Top the Cybersecurity Risk List

Symantec and research firm Sperling's BestPlaces study found that Boston and Seattle were the two U.S. cities most at risk for cyber attacks. Check out the complete Top 50 list.

Better Backups Mean Better Data Security

Guard against malware and protect your data by configuring your PC to be as "bullet-proof" as possible.

Are Virtual Servers Less Secure Than Physical Servers?

Research firm Gartner argues in a new report that servers that are virtualized end up being less secure than before when it comes to network security.

The Federal Cyber Security Market

Market Research Media anticipates that the federal cybersecurity market will grow at about 6.2 CAGR over the next six years.

Editor's Pick: The Do-It-Yourself Security Audit

Security breaches can be very costly--but so can a full, professional-grade security audit. In this Internet.com eBook, learn how to conduct your own comprehensive security tests.

Cybersecurity Bill Returns to Senate

Landmark Internet security legislation returns with 'kill switch' provision dropped and scales back the potential privacy incursions outlined in the original version.

Google Hardens Browser Ahead of Critical Hacker Test

Google patches Chrome for eight vulnerabilities that could have left users at risk.

Security Firm Warns of Hole in Windows Virtual PC

Core Security Technologies said it's found a nasty bug in Windows Virtual PC that could let an attacker bypass important security protections. But what does Microsoft think?

Cyber Crooks Doubled Their Take in '09: FBI

The FBI said losses from cyber criminal activities more than doubled in 2009 and that men were more likely than women to be scammed for larger sums.

What Microsoft Learned About Data Security From 'Botnet'

Taking down a botnet, especially one of the biggest, is a daunting task that needs to be done in 'layers' and severing the creature's connections to the outside world doesn't get rid of the beast.

Facebook Malware Targets Banking Passwords

The social networking site is dealing with yet another malware scam that attempts to steal users' usernames and passwords to access Facebook users' online banking accounts.

Virtualization and Security

A Gartner report warns that through 2012, 60 percent of virtualized servers will be less secure than the physical servers they replace.

7 Cool, Free Security Applications

Eric Geier offers an interesting list of free security apps, including biometric logins, encrypting flash drives, and locking down public workstations.

RSA DLP Upgrade Heightens Data Security

RSA has added more than 70 new features to its Data Loss Prevention (DLP) applications designed to protect sensitive information in the enterprise.

Feds Crack Hackers' Stock Manipulation Cybercrime

The SEC convinced a U.S. federal judge to freeze the assets of a Russian company accused of using investors' stolen passwords and usernames to game equity trades on some 38 stocks.

McAfee's New Cyber Security Tactic--Information

McAfee's new Consumer Threat Alert program is dedicated to keeping consumers informed about the latest malware and online scams.

Mobile Security and the iPad

Key security considerations for enterprises to bear in mind when deploying the Apple iPad.

Ensuring Cloud Security

A CloudSwitch white paper looks at the challenges of ensuring security in a public cloud.

Microsoft Offers IE Exploit Workaround, Promises Patch

On the heels of a researcher releasing an exploit for a newly discovered security hole, Microsoft has vowed to deliver a speedy patch and to help out worried users.

Twitter Launches Geo-location Feature

Presenting potential risks to businesses and a new realm of privacy challenges to individual users, Twitter takes its geotagging feature live.

The Cost of Cybercrime

The dollar loss from cases referred to the Internet Crime Complain Center totaled $559.7 million in 2009.

Ask Not What Cybersecurity Can Do for You...

The government extends its dialog with industry and citizens on the vital topic of cybersecurity.

Westin Hotel's POS Hacked

A cyber attack breached the Los Angeles Westin Bonaventure Hotel & Suites point-of-sale systems for several months last year.

Improve Windows Security with Smart Cards

Security authentication and single-sign on are among the benefits to enterprises using Vista and smart cards.

Preventing Data Theft

A white paper from FireEye offers guidance of protecting data from malware-related theft.

Apple Updates Safari for 16 Flaws

More than half the Apple browser's security flaws are in the WebKit rendering engine, which is also used by Google's Chrome.

HSBC Confirms Massive Database Security Breach

The bank came clean this week, admitting that data stolen by a former IT specialist exposed a lot more clients to possible identity theft than it previously suspected.

Hacker Releases Metasploit Exploit for IE Zero-Day Hole

What started as 'targeted' attacks may now expand into a full-blown pandemic, since a hacker figured out how to turn hints into a Metasploit exploit module.

Most Managers Disable Laptop Encryption

A study from Absolute Software and the Ponemon Institute finds that 56 percent of business managers disable encryption.

IBM Best in Privacy Among Tech Firms

IBM was ranked the most trusted company for privacy among IT companies, fending off the likes of HP and eBay for the coveted top spot. But Facebook wasn't as fortunate.

Social Network Security

A Microsoft white paper looks at the key threats and best practices surrounding enterprise social networking.

Increase Laptop Security with BitLocker

If your laptop is running either the Ultimate or Enterprise editions of Windows 7 or Windows Vista, you can take advantage of the BitLocker feature to encrypt the hard drive. Here's how.

New Architecture Improves Data Security

Symantec this week demonstrated a new Object File Server technology designed to help deal with secure data management and storage issues.

Vodafone HTC Smartphone Ships With Malware

Panda Security discovered Confiker, Mariposa, and Lineage password stealing malware samples installed on a recently purchased Vodafone HTC Magic smartphone.

Arkansas National Guard Loses Hard Drive

More than 35,000 Arkansas National Guard soldiers are learning that their names, social security numbers and other personal data are at risk after an external hard drive vanished.

Symantec Offers New Approach to Mobile Security

Security software firm shows prototype system designed to help carriers weed out bad apps, as well as security risks.

Danger in the Cloud

A report from HP and the CSA looks at the potential security threats around the use of cloud services.

Microsoft Patch Tuesday: Two Bug Fixes, IE Warning

Besides patches for Microsoft Excel and Windows Movie Maker, Patch Tuesday includes a warning about zero-day attacks on some users via Internet Explorer 6 and 7.

Review: Apricorn Aegis Padlock

For secure, portable external storage needs, the Apricorn Aegis Padlock combines hardware encryption with a built-in numeric keypad and PIN that stop unauthorized data access.

Wyndham Hotels' Networks Hacked--Again

For the second time in two years, Wyndham Hotels and Resorts says hackers accessed its computer systems, stealing sensitive information, including customer payment card data.

Cisco Enhances Network Security

Cisco recently announced the expansion of TrustSec to help create identity secured networks.

China Claims Google Never Filed Complaint

Chinese news sources report that Chinese officials say Google didn't report the cyber attacks it experienced to state authorities.

PC Security: Energizer DUO Software Carries Trojan

Government security experts are warning consumers that using Energizer's DUO USB battery charger could leave their Windows PCs open to attack from hackers.

Top Ten Wi-Fi Security Threats

Enterprise WLANs may be safer than ever – but the work of wireless security is never done.

Verisign: Security Solutions Overwhelming to Consumers

Is the Internet safe? Jim Bidzos, who organized the first RSA conference in 1991, says most consumers don't think so.

Securing the Cloud

An RSA white paper looks at the key issues that need to be considered to ensure a safe cloud computing environment.

Corporate Web Security Market to Reach $2.1 Billion by 2014

The Radicati Group also predicts that the market will exceed $1.1 billion in 2010.

Buying Guide: Enterprise Online Backups

Part of keeping your data secure is creating a reliable, secure system of backing up that meets all your needs. We help you shop for the best solution.

Phishers Targeting More (And Bigger) Fish

Hackers and e-crooks have moved beyond the low-hanging fruit of online banks and eBay as primary targets for their elaborate phishing schemes, according to a new report.

FBI to Private Sector: Cybersecurity Joint Effort

Successful busts, such as the Mariposa botnet, require international and private sector cooperation, said FBI director Robert Mueller at RSA.

Security Vendors Show Innovation at RSA

At the RSA Conference this week in San Francisco, some small vendors stood out for their innovative security solutions.

Homeland Security Chief Details Cyber Threats

At the RSA conference this week, DHS chief Janet Napolitano calls for quicker action in securing the U.S. from a growing number of cyber threats.

Cybercrime Challenges National Security, Civil Liberties

RSA panel of experts says the U.S. is under daily cyber attacks by China, Russia, and their proxies. What can we do to protect our key systems and privacy?

Windows Security Gets Boost from ClamAV

Open source antivirus comes to the Windows desktop with a little help from a new cloud backend to accelerate security.

A Holistic Approach to Security

A Guardium white paper offers advice on developing a holistic approach to database security.

Dealing With Unsafe File Types

A Microsoft white paper looks at file types that are potentially executable, and explains the safeguards that protect against mishandling them.

White House Declassifies Cybersecurity Plan

Obama's Internet security advisor tells RSA crowd they need to secure their data, but his big news was the disclosure of a White House initiative.

Cloud Computing Takes Center Stage at RSA 2010

At RSA, most heads are in the cloud with everyone from Symantec to IBM delivering new cloud-based security solutions.

Crackdown on Mariposa: Botnet Infected 13 Million PCs

Internet security experts say massive botnet attack impacted computers in more than 190 countries and more than half of the world's 1,000 largest companies.

Database Security Lacking at Financial Services Firms

New research from the Ponemon Institute and Compuware details sloppy data practices that pervade the financial services sector and outlines the potential consequences of a breach.

How to: Set Up TrueCrypt Disk Encryption, Part 2

In the second and final part of this series, we cover more advanced methods of configuration and mounting of this open source tool.

Should Malware-Infected PCs Be Banished?

Microsoft proposes throwing malware-infected PCs into quarantine and denying them Internet access. The company also announces availability for its new identity management product.

IBM Pitches Code, Network Security

At RSA, IBM announces it will expand its security portfolio with new static code analysis and secure Web services.

Symantec Chief Says Cloud Security the Next Step

Information is gold and cyber villains are getting more aggressive in their attempts to steal it. Data theft requires new ways of thinking, says Symantec CEO Enrique Salem at RSA.

Citrix Improves Security with Web Application Firewall

Making sites go faster isn't enough for Citrix. Now it wants to make site delivery both faster and more secure.

The State of Software Insecurity

A Veracode report finds that 58 percent of applications contain severe vulnerabilities.

Microsoft Warns: Don't Press "F1"

A new zero-day vulnerability threatens to use Windows help files against users, if they can be convinced to press F1, the traditional key for help. ("It's a trap!")

Desktop Virtualization and Security

A white paper from RSA and ESG looks at the challenges and benefits of desktop virtualization.

Identity Protection through Application Security

ThreatMetrix and CyberSource team up to build new, advanced identity protection applications to combat identity theft and further secure online transactions.

Editor's Pick: Protecting Your Sensitive Information with Encryption

Learn the basics of encryption, including e-mail options and public key cryptography for enterprise users.

Is the U.S. Planning Its Own Cyber Attacks?

Gerry Blackwell looks into Gen. Alexander's statement that his responsibility is to "plan, coordinate, and conduct offensive...cyberspace operations."

Security Trends: Archive: March 2010

Topic Centers

Articles by Type

Contact Us

More Security