News

Microsoft to disclose third-party vendor product flaws
Microsoft to disclose third-party vendor product flaws
Microsoft said it will begin disclosing third-party bugs as part of a revamping of its vulnerability disclosure practices.
April 20, 2011
Infosecurity Europe 2011: Consumerisation of IT is a fact of security life, says Lord Erroll
Infosecurity Europe 2011: Consumerisation of IT is a fact of security life, says Lord Erroll
Organisations must accept change, embrace consumerisation of IT, and ensure security by focusing on the most sensitive data, says Merlin Lord Erroll.
April 20, 2011
SANS Institute to teach VOIP security course for first time in Europe
SANS Institute to teach VOIP security course for first time in Europe
The SANS Institute has announced its intent to offer VOIP security courses in Europe for the first time. Plans call for the course to be offered at the institute's Amsterdam operations centre from May onwards.
April 19, 2011
Number of compromised records drops precipitously, Verizon finds
Number of compromised records drops precipitously, Verizon finds
The number of compromised records involved in data breaches plummeted from 144 million in 2009 to only 4 million in 2010, but the number of data breaches soared to its highest number ever, according to the 2011 Verizon Data Breach Investigations Report.
April 19, 2011
Linkedin social engineering test snares 68% of users
Linkedin social engineering test snares 68% of users
Trusteer, the in-browser security specialist, recently conducted a honeypot social engineering test on 100 users of LinkedIn, with 68% of users potentially infecting themselves.
April 18, 2011
Whitehall black-on-black text security blunder reveals info on multiple websites
Whitehall black-on-black text security blunder reveals info on multiple websites
An elementary security error involving the use of black text on a black background with redacted security documents published on the web effectively made the IT prowess of the Ministry of Defence, and other government departments, a laughing stock over the weekend.
April 18, 2011
Google says GSA certified its Google Apps for Government under FISMA
Google says GSA certified its Google Apps for Government under FISMA
In response to theDepartment of Justice (DoJ) and Microsoft, Google said that the General Services Administration (GSA) had determined that Google Apps for Government was certified under the Federal Information Security Management Act (FISMA), a claim that GSA appears to back.
April 18, 2011
Apple releases Safari, Leopard, Snow Leopard security updates
Apple releases Safari, Leopard, Snow Leopard security updates
Apple has released security updates to its Safari web browser as well as its Leopard and Snow Leopard operating systems.
April 18, 2011
Android/iPhone app allows spoofed caller ID calls to be made
Android/iPhone app allows spoofed caller ID calls to be made
A new app for Google Android and jailbroken iPhones allows users to make calls with their own choice of caller ID. Known as SpoofPro, the app routes calls via the company’s servers in the US, allowing any caller ID to be generated.
April 15, 2011
Interview: William Barker, chief cyber security advisor, NIST, Dept. Of Commerce
Interview: William Barker, chief cyber security advisor, NIST, Dept. Of Commerce
The inaugural World Cyber Security Technology Research Summit was held at Queen's Centre for Secure Information Technologies (CSIT) in Belfast in March. Of all the delegates that Infosecurity had the pleasure of speaking with, William Barker, chief cyber security advisor NIST, has arguably the most impressive CV.
April 15, 2011
McAfee, Siemens team to combat critical infrastructure threats
McAfee, Siemens team to combat critical infrastructure threats
Information security firm McAfee and industrial giant Siemens are teaming to improve security against malware, such as Stuxnet, that targets industrial control systems running critical infrastructure protection.
April 15, 2011
Enterprises ignore cybercrime trends at their peril, says security researcher
Enterprises ignore cybercrime trends at their peril, says security researcher
Cybercriminals know the value of data better than the organizations they are targeting, according to a security strategist who studies hacker behavior.
April 15, 2011