Click here

Security Trends: Archive: May 2010 

Data Theft Puts NC Employees At Risk

A pair of unencrypted DVDs storing names and social security numbers of current and former Charlotte, NC city employees has vanished into thin air.

Phishing Scam Targets Military Credit Unions

A pair of phishing sites masquerading as credit unions used by military servicemen and servicewomen has been stealing personal banking information for months.

Understanding Rogue Anti-Virus Software

A Sophos white paper looks at the class of malware known as fake anti-virus, rogue anti-virus, or scareware.

Symantec Eyes Cloud Security for Smartphones, Internet Devices

The world's largest security software maker invested an undisclosed amount in Mocana, a San Francisco security firm that specializes in protecting connected devices beyond the PC.

Lawmakers Ask Google for Answers on Wi-Fi Data Snare

Three prominent representatives ask Google for answers about the scope of its Street View operation, which mistakenly collected Internet transmissions over open Wi-Fi networks.

Age and Privacy Awareness

A new report finds that young adults are more likely than older users to restrict what they share online.

Simplifying Endpoint Security

A MessageLabs white paper examines the benefits of a hosted endpoint solution.

Zuckerberg Promises Simpler Privacy Settings Soon

Amid intensifying criticism, Facebook is rolling out a new set of simplified controls that CEO Mark Zuckerberg says could arrive as early as next week.

Busting (or Trusting) Wi-Fi Security Myths

We take a hard look at five bits of wireless security conventional wisdom and tell you which are true and which are bogus.

Sourcefire Expands IPS App Awareness

IPS vendor re-engineers its core product to enable more rapid application awareness updates to better protect enterprise security.

Guide to Disaster Recovery Solutions for SMBs

It's important not to overlook disaster recovery when making plans to secure your small business's data.

The Cost of Identity Theft

A recent ITRC report finds that identity theft costs victims less than it did a year ago.

Enhance Desktop Security Using Virtualization

Using PC virtualization can add a layer of defense against malware and other types of security compromises to your desktop.

Facebook CEO Admits Mistakes, Promises Improved Privacy

In his first public comments addressing the recent surge of criticism over changes to Facebook's privacy settings, Mark Zuckerberg says the company will release new controls.

Facebook Users On Lookout for 'Beach Babe' Malware

For the second weekend in a row, Facebook's 400 million-plus registered users are being targeted by a malware scam disguised as a video of attractive, scantily dressed women.

Ensuring Web Application Security

A Qualys white paper offers advice on putting together an effective and affordable web application security program.

UK Internet Users Increasing Awareness of Security Issues

An Ofcom report states that British Internet users are becoming more aware of the importance of online security and privacy.

Microsoft to Give Governments Earlier Bug Warnings

Governments around the world told Microsoft they need more information sooner regarding patches and other security-related incidents, and the software giant delivers.

Malware Is South America's New Growth Industry

A comprehensive Internet security report by Zscaler found that Web servers hosted in South America harbored a much higher ratio of malware-infected servers than other regions.

Eight Whole Disk Encryption Options

Whether you need a free solution or have a budget to spend, whole disk encryption is a must-have. We lay out a few good alternatives.

Federal Agencies Plead For Cybersecurity Ideas

As the administration continues its efforts to overhaul the federal government's approach to cybersecurity, agencies are launching an online portal asking for research proposals.

Network Security Review: CACE Pilot

An in-depth look at CACE Pilot ($1295), which cuts large-volume traffic captures down to size through visualization, drill-down, reporting, and more.

Maximizing the Security of Sensitive Data

A Sophos white paper offers guidance on finding the right balance between data security and easy access to information.

Microsoft Warns of Hole in 64-bit Windows

Microsoft says it's working on a patch for a security vulnerability discovered in some 64-bit versions of Windows and Windows Server, but downplays the risk of system takeovers.

Hackers Find New Opening With 'Lost' Finale

The popular ABC drama is in its final season and hackers are preying on viewers' interest to spread all sorts of malware.

50 Open Source Security Tools

Mix-and-match open source substitutes for commercial security software with this list of popular commercial apps and their open source counterparts.

PHP Development Encryption Techniques

If you don't encrypt your database, a hacker could steal all the passwords and usernames stored there. Safeguard your data using the encryption techniques that PHP offers.

Key Security Policies

A Global Knowledge white paper looks at the 10 policies that every organization should implement.

Verizon Business Rolls Out New Security-as-a-Service Portfolio

Verizon Business says SaaS will make it easier and cheaper for enterprise customers to log into corporate networks, share data from mobile devices and more.

Federal Cyber Security in 2010

A new (ISC)2 report examines federal CISOs' perspective on the cyber security of national assets.

Google Apologizes for Snaring Wi-Fi Data

Under pressure from German data-collection authorities, search giant confesses that its Street View cars have been inadvertently collecting unsecured network information.

When Is a Cyber Attack an Act of Cyber War?

Experts wonder, is there an undeclared war raging in cyberspace? And if so, whose job is it to fight it?

Laptop, Medicaid Patients' Data Disappear

Nearly 10,000 citizens enrolled in New Mexico's Medicaid Salud plan had their social security numbers and other personal data exposed after an unsecured laptop was stolen.

The Expanding Security Landscape

A Qualys white paper examines the increasing challenges enterprises face in protecting sensitive data.

U.S. Losing Cyber War, Official Says

U.S. defense official admits that United States is losing massive amounts of data to cyber attacks.

Phishers Pedaling Facebook Scams in Record Numbers

The social networking site has joined the likes of Bank of America, PayPal and the IRS as the one of the most popular Web sites targeted by phishers.

Facebook Tightens Login Security Features

Leading social network Facebook is taking steps to improve authentication by blocking suspicious logins and providing users with enhanced notifications.

Database Security: IBM DB2 ROLEs

Learn how to simplify your IBM DB2 Database Security Setup using DB2 ROLEs.

Cloud User Security

A study by CA and the Ponemon Institute examines IT professionals' key cloud security concerns.

Mozilla Expands Plugin Checker for Rival Browsers

Effort to identify at-risk plugins moves beyond Firefox to include Internet Explorer and other browsers, but does it work?

Facebook Circles Wagons Amid Privacy Complaints

The world's biggest social network is calling an all-hands company meeting to discuss its growing image problem over its approach to privacy.

Software Piracy Cost Companies $51B: BSA Report

Global software piracy continued virtually unabated in 2009, costing software developers an estimated $51 billion, according to a survey by the Business Software Alliance.

Single Phishing Gang Dominated Attacks in 2009

According to the Anti-Phishing Working Group, one cyber gang known as Avalanche was responsible for two-thirds of all phishing attacks in the second half of 2009.

Justifying the Cost of IT Security

A Qualys white paper offers guidance on justifying and allocating an information security budget.

Measuring Software Security: BSIMM2 and Beyond

The new BSIMM2 provides the data-driven measurements that allow organizations to objectively assess their software security maturity level against their peers and themselves.

Security Firm Finds Gaps in Popular AV Software

Researchers at Matousec are warning that a kernel-level attack can be used by hackers to bypass leading security software applications for Windows-based PCs and devices.

Guide to Buying Secure Removable Storage

When shopping for secure removable storage devices, such as flash drives or portable hard drives, there are several key points to consider.

The Security Wind is Blowing Toward Private Clouds

What tends to scare people away from putting their data in the cloud are worries about security. Are private clouds the answer?

Assessing Federal File Transfer Security

A survey by MeriTalk and Axway finds that 54 percent of respondents do not currently monitor for FTP use within their agencies.

Patch Tuesday Plugs Holes in Microsoft Windows, Office

Microsoft releases two 'critical' patches for Windows and Office in May's Patch Tuesday drop, making things a little easier for IT administrators compared to last month.

Top Ten Free Wi-Fi Security Test Tools

Enhance network security by finding your WLAN's vulnerabilities before attackers do--and without spending a bundle.

Protecting Healthcare Data from Privacy Breaches

An Imprivata white paper looks at the challenges that healthcare organizations face in protecting private data.

Twitter Bug Let Users Kidnap 'Followers'

Gadget site uncovers simple way to force other users to follow you, even big movie and TV stars, but Twitter staffers rush out a fix to the weakness in the system.

Phishing Scam Targets Apple Gift Card Holders

Online scamsters are using Apple's brand as a lure to get people to divulge their personal information and plunder their gift cards.

Web-Access Device 'Fingerprints' Identify the Bad Guys

Our colleagues at IT Business Edge speak with Scott Waddell, vice president of technology at iovation, about fraud prevention and risk mitigation.

Yahoo Messenger Users Targeted By Clever Worm

Instant messaging fans using Yahoo Messenger have been infected by a worm that's disguised as a photo link from a member of a user's contact list.

Microsoft Debuts New Forefront Security Tools

Microsoft rolls out two new products for protecting customers' enterprise data through the use of multiple malware engines on SharePoint collaboration servers.

Security Forecast 'Cloudy' at Interop LV 2010

Faster network infrastructure pushes more virtualized services into the cloud, reshaping security risks and strategies.

Examining Web Site Security

A WhiteHat Security report looks at web site security with a focus on the security of specific programming languages.

Microsoft: Only Two 'Critical' Patches Coming Tuesday

May's "Patch Tuesday" drop will be relatively painless, with only two "critical" patches to deal with. But why isn't last week's SharePoint flaw being addressed?

Eight Secrets of Data Loss Prevention

A CA white paper suggests eight key considerations for effective data loss prevention.

Best Practices: Securing Smartphones in the Enterprise

Whether or not corporate policy allows it, workers still bring smartphones to the office. Here, seven steps for managing personal mobile devices in an enterprise environment.

Verizon, Secret Service Team Up on Breach Reports

Data Breach Investigations Report will combine U.S. Secret Service information with telecom's investigations to provide a thorough review of cybercrime tactics and responses.

How to Encrypt a USB Flash Drive

One of the best ways to prevent data theft and improve information security is to encrypt your data. Don't worry--it's easy!

House Privacy Bill Arrives, Leaves Advocates Fuming

After more than a year of hearings and meetings, Reps. Rick Boucher and Cliff Stearns debut draft privacy legislation that would set parameters for online marketers.

Microsoft Calls for a Cybercrime Framework

Charged with improving Internet and software security, Microsoft's Scott Charney makes recommendations about how to better protect PCs and track down cyber criminals worldwide.

Hospital Data Breach in Kentucky Affects Thousands

A flash drive storing patient names, birth dates, admission and discharge dates, as well as insurance information has gone missing from a Kentucky psychiatric hospital.

FireEye Touts Next-Generation Malware Protection

New inline threat-prevention appliance incorporates integrated Malware-VM and Malware-Callback filters to inoculate networks.

Virtualization and Security

A Prism Microsystem study finds that companies are more eager to deploy virtualization than they are ready to address the security issues surrounding such deployments.

IE Use Continues to Drop

Perhaps because of security concerns, use of Microsoft's Internet Explorer browser has continued to drop worldwide.

Preventing Data Theft

A Sophos white paper looks at the steps required to implement an effective data loss prevention strategy.

Smartphones Mean Enterprise Data Security Risks

Enterprises need tools now to deal with mobile devices along with enforceable means to prevent truly sensitive data from flowing to handhelds, says Sonny Discini.

Imation Adds Encryption, Authentication

Imation's Defender collection of storage devices meets international standards for encryption, including FIPS 140-2 (Levels 1 or 3, depending on device type).

Most Are Unaware of Cloud Security Issues

A BSA survey has found that 60 percent of US citizens don't even know what 'in the cloud' means.

Collaboration Seen as Missing Link in Cybersecurity

An international study highlights a weakness of business and government cybersecurity: the absence of strong communication between public and private sectors.

Protect Your E-mail From Hackers

When it comes to securing your e-mail, particularly when traveling, constant vigilance is vital. Learn tips for protecting sensitive communication at home or abroad.