News

Veracode goes large with VAST app security testing for cloud, mobile
Veracode goes large with VAST app security testing for cloud, mobile
Application security testing company Veracode has launched the Vendor Application Security Testing (VAST) program to provide independent, automated and outsourced compliance testing for cloud, mobile and outsourced applications, to help enterprises reduce the security risks associated with the use of vendor-supplied software.
Sept. 19, 2012
NIST releases comprehensive risk assessment guidelines
NIST releases comprehensive risk assessment guidelines
The US National Institute of Standards and Technology (NIST) has released a final version of its risk assessment guidelines for determining the level of information security risks in IT infrastructure.
Sept. 19, 2012
GSA to implement $2.5B email-as-a-service project
GSA to implement $2.5B email-as-a-service project
The US General Services Administration (GSA) is planning to implement a five-year, $2.5 billion email-as-a-service (EaaS) strategy, as part of the government-wide cloud computing initiative that helps meet federal mandates for migrating information technology to the cloud.
Sept. 18, 2012
NullCrew: the principled hacker group?
NullCrew: the principled hacker group?
In a wide-ranging interview broadcast over online Spreaker radio but conducted probably via IRC, UK Anon Winston Smith has been talking to Null, the leader of the NullCrew hacking group.
Sept. 18, 2012
51% of SMB endpoints infected annually
51% of SMB endpoints infected annually
When it comes to small- and medium-sized business (SMB) applications, the cloud and mobility are on the rise, driving an increased need for comprehensive security, according to a new report from Osterman Research, commissioned by Trend Micro.
Sept. 18, 2012
The cloud: transforming the role of the infosec professional
The cloud: transforming the role of the infosec professional
Infosecurity caught up with John Howie, COO of the Cloud Security Alliance (CSA), at the recent ASIS/(ISC)² Congress in Philadelphia, where he discussed how the cloud is altering the role of security professionals
Sept. 18, 2012
Romanian Subway hackers plead guilty to cyber-fraud
Romanian Subway hackers plead guilty to cyber-fraud
Subway restaurant franchises can rest easy: The culprits behind an international electronic fraud ring that targeted point-of-sale (PoS) vulnerabilities at hundreds of US retail locations have pled guilty to cyber-fraud charges.
Sept. 18, 2012
TDSS/TDL4 'indestructible botnet' is back with 250K victims already
TDSS/TDL4 'indestructible botnet' is back with 250K victims already
Damballa has discovered a new iteration of the TDSS/TDL4 botnet that, at its height last autumn, infected more than 5.5 million victims. Now, it’s back and is utilizing domain generation algorithm (DGA)-based communication for command-and-control (C&C).
Sept. 18, 2012
YouTube declines to remove Mohammad video clip
YouTube declines to remove Mohammad video clip
Asked by the White House to reconsider whether the infamous Mohammad video clip is in violation of its terms of service, Google has replied that it is not. Although it is blocking the clip in Egypt, Libya, Indonesia and India, this, says Google, is in keeping with local laws.
Sept. 17, 2012
Quantum Key Distribution takes to the air
Quantum Key Distribution takes to the air
An aircraft in flight has successfully transmitted quantum encryption keys to a ground station, bringing closer the time when satellites can be used to provide a theoretically (allegedly) secure communications network.
Sept. 17, 2012
Where to go to find the music pirates
Where to go to find the music pirates
A new report, drawing on 18 million observations of P2P activity on BitTorrent file sharing, analyzes what locations are downloading which music files – legally or illegally.
Sept. 17, 2012
China's smart-grid explosion drives 'huge' security spending spree
China's smart-grid explosion drives 'huge' security spending spree
China’s cybersecurity market is set to explode, growing from a valuation of just $1.8 billion last year to $50 billion by 2020, according to new research from GlobalData. The big 44.7% growth curve – which the firm says is an anomaly on the global stage – will be mainly driven by efforts to secure the country’s extensive and ever-growing power infrastructure.
Sept. 17, 2012