News

New exploitation technique uses improper protocol specifications
New exploitation technique uses improper protocol specifications
A new type of exploitation technique is making use of improper implementation of proprietary protocol specifications, warns an analysis by researchers from Alert Logic.
Aug. 11, 2011
ISO and IEC publish new standards on biometric data security
ISO and IEC publish new standards on biometric data security
The International Organization for Standardization (ISO) has teamed up with the International Electrochemical Commission (IEC) to publish joint security and privacy standards regarding the use of biometric data for authentication.
Aug. 11, 2011
Anti-virus, firewalls and intrusion detection are no longer enough warns SANS security expert
Anti-virus, firewalls and intrusion detection are no longer enough warns SANS security expert
A leading IT security expert is warning companies that AV, firewalls and IDS technology may no longer be enough to defend company IT resources against attacks.
Aug. 10, 2011
Myanmar surprises as top source of malicious internet traffic
Myanmar surprises as top source of malicious internet traffic
Myanmar has come out of nowhere to top the list of sources of malicious internet traffic in Akamai’s State of the Internet report, the first time the country has ever appeared on the list.
Aug. 10, 2011
Security in the Post-PC era: smartphones and tablets require more security
Security in the Post-PC era: smartphones and tablets require more security
The smartphone, and increasingly the tablet, are fast becoming the primary device of choice for both personal and enterprise use. Infosecurity spoke with Omri Sigelman, VP of marketing and products for AVG Mobile Solutions, at last week’s Black Hat conference in Las Vegas to discuss the state of security in the rapidly changing ‘post-PC era’.
Aug. 10, 2011
Hampshire school data breach highlights need for multiple passwords
Hampshire school data breach highlights need for multiple passwords
A data breach at Bay House School in Hampshire has highlighted the importance of not using the same password for different websites and applications, say experts.
Aug. 9, 2011
Researcher says MBR malware is back in fashion
Researcher says MBR malware is back in fashion
A Symantec security researcher is reporting that MBR – Master Boot Record – infections are now back in fashion amongst cybercriminals after several years of largely being ignored.
Aug. 9, 2011
SpyEye trojan is revealed as credit card credential grabbing machine
SpyEye trojan is revealed as credit card credential grabbing machine
A security researcher with Computer Associates has carried out an in-depth analysis of the SpyEye trojan and concluded that the malware has been cleverly coded to hide the fact that it is really little more than a clever piece of credential-grabbing code.
Aug. 9, 2011
Cybercriminals steal – from each other
Cybercriminals steal – from each other
The latest monthly malware and threats report from GFI Labs - the research operation of GFI Software - claims that cybercriminals are now stealing end user credentials from each other, as well as using complex new methodologies when seeking to infect end users' PCs.
Aug. 9, 2011
Visa to waive PCI DSS compliance validation for US merchants that deploy chip-enabled terminals
Visa to waive PCI DSS compliance validation for US merchants that deploy chip-enabled terminals
Effective Oct. 1, 2012, Visa is eliminating the requirement for US merchants to annually validate their compliance with the PCI Data Security Standard (PCI DSS) if 75% of the merchant’s annual Visa transactions originate from chip-enabled terminals.
Aug. 9, 2011
Smart devices are shipping with security holes, say engineers
Smart devices are shipping with security holes, say engineers
Nearly 25% of engineers said they personally knew about security problems in their company’s smart devices that have not been disclosed to their customers and the general public, according to a recent survey by device security firm Mocana.
Aug. 9, 2011
Anonymous hacker group publishes data stolen from US police departments
Anonymous hacker group publishes data stolen from US police departments
Hacktivist group Anonymous and its offshoot LulzSec have published information stolen from rural US police departments in revenge for recent law enforcement actions.
Aug. 8, 2011