More Security Articles

09 May 2013
News: Adobe warns customers of unpatched critical flaw in ColdFusion

Adobe has warned users of its ColdFusion application server platform of a critical vulnerability that could give unauthorized users access to sensitive files stored on their servers.
News: Windows XP migration worries exaggerated by 'dead' applications

Many organisations exaggerate the difficulties of migrating from Windows XP to Windows 7 by over-estimating the importance of little-used applications, a survey from consultancy Centrix Software has suggested.
News: Security practices wanting in virtual machine world, survey finds

Organizations leaning too heavily on virtualization vendors for protection, BeyondTrust finds
News: Lesson from the Google office hack: Do not trust third-parties

Many Tridium Niagara systems in use today are left unpatched, and the company acknowledges there's a problem with update deployments
News: Name.com forces customers to reset passwords following security breach

Domain registrar Name.com forced its customers to reset their account passwords on Wednesday following a security breach on the company's servers that might have resulted in customer information being compromised.
News: Barclays adopts voice biometrics for customer identification

Barclays Wealth & Investment Management is using Nuance’s FreeSpeech voice biometrics solution to automatically confirm and identify customers, instead of using security questions that rely on the customer’s ability to remember a number of different details.
News: CIOs fail to protect mainframe customer testing data

A fifth of CIOs (20 per cent) admit to not masking or protecting their customer data before providing it to outsourcers for mainframe application testing purposes.
News: Researchers find hundreds of insecure building control systems

Intruders used to creep in through ventilation ducts. Now they break in using the software that controls the ventilation.
News: Microsoft releases fix-it for Internet Explorer 8 vulnerability

Microsoft has released a temporary fix for a zero-day vulnerability in Internet Explorer 8, which was used by hackers in a prominent attack against the U.S. Department of Labor's website.
News: Researchers find hundreds of insecure building control systems

Intruders used to creep in through ventilation ducts. Now they break in using the software that controls the ventilation.
News: The Kwikset Kevo lock opens at your touch

Those fancy entry locks with the touch-sensitive numeric keypads are so 2012. Kwikset's new Kevo deadbolt quizzes your iPhone to verify that you're authorized to enter, and then unlocks when you physically touch it.
08 May 2013
News: Study: US military too reliant on foreign-made equipment

The U.S. military's reliance on foreign-made products, including telecommunications equipment and semiconductors, is putting the nation's security at risk by exposing agencies to faulty parts and to the possibility that producing nations will stop selling vital items, according to a new report from the Alliance for American Manufacturing.
News: Interop network squares off against controlled 70G bit/sec DDoS attack

The network at one of the biggest annual networking shows is being subject to a series of distributed denial of service attacks (DDoS) creating the equivalent of 90 million sessions attempting to use the network at the same time, all as part of a controlled test of the Interop network.
News: Senators want sanctions against countries supporting cyberattacks

Two U.S. senators will push Congress or President Barack Obama's administration to pursue trade and immigration sanctions against China and other countries that allegedly support cyberattacks on U.S. government agencies and businesses, the lawmakers said Wednesday.
News: Spamhaus DDoS suspect extradited to the Netherlands

A 35-year-old Dutchman suspected of participating in a large DDoS attack on antispam organization Spamhaus was extradited from Spain to the Netherlands on Monday evening, the Dutch Public Prosecution Service said Wednesday.
News: Experts wary of Pentagon cybersecurity report fingering China

Marks first time U.S. has accused China of using cyberweapons to steal intellectual property, and gain a military and economic advantage
News: Welcome sign for hijackers on 24-7 for 30% of social networkers

Survey also finds nearly half of netizens need nudge to change passwords
How-Tos: Passwords: You're doing it wrong. Here's how to make them uncrackable.

For years now I've harangued relatives about their shoddy password practices. Either they use easily-hacked passwords or forget the passwords they've created--sometimes both.
News: Malwarebytes adds antivirus scanning to cloud backup software

Left-field antivirus firm Malwarebytes has launched the first ex-beta version of Secure Backup, a cloud security system designed to scan users’ files for infection before storing them in the cloud.
News: Highly critical vulnerability fixed in Nginx Web server software

The development team behind the popular Nginx open-source Web server software released security updates on Tuesday to address a highly critical vulnerability that could be exploited by remote attackers to execute arbitrary code on susceptible servers.