Infosecurity - Blog http://www.infosecurity-magazine.com/blog/ Copyright Elsevier Ltd Intuitiv Ltd (www.intuitiv.net) Fri, 24 May 2013 22:59:56 GMT Infosecurity - Blog http://www.infosecurity-magazine.com/blog/ http://www.infosecurity-magazine.com/_common/img/template/infosec-uk/site-logo.gif Russia Uses 'Single Register' Law To Selectively Block Internet Content http://www.infosecurity-magazine.com/blog/2013/5/22/russia-uses-single-register-law-to-selectively-block-internet-content/905.aspx <p>&nbsp;</p> <div> <div><span style="font-size: 9pt;">&ldquo;Won't somebody please think of the children?&rdquo; seems to be Russia's refrain when it comes to their&nbsp;<a href="http://www.wired.com/dangerroom/2012/11/russia-surveillance/">recent inception of internet censorship laws</a>.&nbsp;I ... Wed, 22 May 2013 15:53:28 GMT http://www.infosecurity-magazine.com/blog/2013/5/22/russia-uses-single-register-law-to-selectively-block-internet-content/905.aspx Building Trust and Security through Transparency of Service http://www.infosecurity-magazine.com/blog/2013/5/21/building-trust-and-security-through-transparency-of-service/903.aspx <h5>By David Baker</h5> <p>With the growing movement of enterprises to the cloud, it&rsquo;s more important than ever that service providers demonstrate and prove good security practices to their customers, in good times and in bad. During an incident, how a cloud provider communicates to its custo ... Tue, 21 May 2013 19:36:07 GMT http://www.infosecurity-magazine.com/blog/2013/5/21/building-trust-and-security-through-transparency-of-service/903.aspx Liability and the “Commercially Reasonable” Standard http://www.infosecurity-magazine.com/blog/2013/5/20/liability-and-the-commercially-reasonable-standard/901.aspx <div>When new technology introduces new legal questions, it can take a long time for courts to sort matters out, and cybersecurity is no exception to the rule. Cyberattacks that yielded major breaches of financial companies in 2008 or 2009 have spawned a series of lawsuits that aim to determine liab ... Mon, 20 May 2013 13:31:45 GMT http://www.infosecurity-magazine.com/blog/2013/5/20/liability-and-the-commercially-reasonable-standard/901.aspx Plugging "Cloud Identity Leaks": Why Your Business Should Become an Identity Provider http://www.infosecurity-magazine.com/blog/2013/5/15/plugging-cloud-identity-leaks-why-your-business-should-become-an-identity-provider/896.aspx <h5>By Mark O&rsquo;Neill</h5> <p>Most people have used the Facebook, Twitter, or Google Apps buttons located on websites to log into third-party services. This approach is useful within consumer IT as it enables the user to access various services via their own Facebook, Twitter or Google Apps pas ... Wed, 15 May 2013 18:43:59 GMT http://www.infosecurity-magazine.com/blog/2013/5/15/plugging-cloud-identity-leaks-why-your-business-should-become-an-identity-provider/896.aspx Securing Credit Card Voice Transactions http://www.infosecurity-magazine.com/blog/2013/5/9/securing-credit-card-voice-transactions-/892.aspx <p>This afternoon, I met the CEO (and co-founder) of <a href="http://www.semafone.com/">Semafone</a>, <a href="http://www.semafone.com/about-us/management-team/">Tim Critchley</a>. When the invitation to interview him landed in my inbox, I was all set to turn it down. As Critchley himself admits, ca ... Thu, 09 May 2013 11:20:57 GMT http://www.infosecurity-magazine.com/blog/2013/5/9/securing-credit-card-voice-transactions-/892.aspx Talking Infosec Awareness and Training with Kaspersky Labs’ David Emm http://www.infosecurity-magazine.com/blog/2013/5/3/talking-infosec-awareness-and-training-with-kaspersky-labs-david-emm-/889.aspx <p>Shortly before the chaos of <a href="http://www.infosec.co.uk">Infosecurity Europe</a>, I joined <a href="http://www.kaspersky.co.uk/about/security_experts">David Emm</a>, senior security researcher at <a href="http://www.kaspersky.co.uk">Kaspersky Lab</a>, for lunch in a lovely quiet gastro pub ... Fri, 03 May 2013 16:40:20 GMT http://www.infosecurity-magazine.com/blog/2013/5/3/talking-infosec-awareness-and-training-with-kaspersky-labs-david-emm-/889.aspx Should Information Security Professionals be Licensed to Practice? http://www.infosecurity-magazine.com/blog/2013/5/2/should-information-security-professionals-be-licensed-to-practice/886.aspx <p>Last week we published accompanying editorials from our most recent print edition that asked a rather simple question: Should information security professionals be licensed to practice?</p> <p>Arguing in favor of such a licensing scheme, <a href="http://www.infosecurity-magazine.com/view/32041/a ... Thu, 02 May 2013 21:08:03 GMT http://www.infosecurity-magazine.com/blog/2013/5/2/should-information-security-professionals-be-licensed-to-practice/886.aspx Security Check List: An Ounce of Prevention is Better than a Pound of Cure http://www.infosecurity-magazine.com/blog/2013/4/30/security-check-list-an-ounce-of-prevention-is-better-than-a-pound-of-cure/883.aspx <h5>By Wolfgang Kandek</h5> <p>It is common belief that buying more robust and expensive security products will offer the best protection from computer-based attacks; that ultimately the expenditure pays off by preventing data theft. According to <a href="http://www.gartner.com/newsroom/id/2156915" ... Tue, 30 Apr 2013 15:26:57 GMT http://www.infosecurity-magazine.com/blog/2013/4/30/security-check-list-an-ounce-of-prevention-is-better-than-a-pound-of-cure/883.aspx Identity Management Plays a Key Role in Mobile Device Management (MDM) http://www.infosecurity-magazine.com/blog/2013/4/30/identity-management-plays-a-key-role-in-mobile-device-management-mdm/882.aspx <h5>By Dan Dagnall</h5> <p class="MsoNormal">As <a href="http://www.infosecurity-magazine.com/view/32031/infosecurity-europe-2013-byod-is-the-new-normal">BYOD</a> and other mobile device related initiatives take hold, sooner rather than later, identity management will once again be considered as an ... Tue, 30 Apr 2013 15:21:27 GMT http://www.infosecurity-magazine.com/blog/2013/4/30/identity-management-plays-a-key-role-in-mobile-device-management-mdm/882.aspx How to Adopt the Public Cloud While Attaining Private Cloud Control and Security http://www.infosecurity-magazine.com/blog/2013/4/26/how-to-adopt-the-public-cloud-while-attaining-private-cloud-control-and-security/880.aspx <h5>By Gerry Grealish</h5> <p>Earlier this year, McKinsey &amp; Company released an article titled &ldquo;<span class="MsoHyperlink"><a href="http://www.mckinseyquarterly.com/Protecting_information_in_the_cloud_3041">Protecting information in the cloud</a></span>,&rdquo; discussing the increased us ... Fri, 26 Apr 2013 16:44:36 GMT http://www.infosecurity-magazine.com/blog/2013/4/26/how-to-adopt-the-public-cloud-while-attaining-private-cloud-control-and-security/880.aspx Cloud-Based Identity Management: Best Practices for Rapid End-User Adoption http://www.infosecurity-magazine.com/blog/2013/4/26/cloudbased-identity-management-best-practices-for-rapid-enduser-adoption/879.aspx <h5>By Glenn Choquette</h5> <p>Identity Management (IdM) is not new. Yet, after all this time on the market, organizations still have mixed results for end-user adoption, as many organizations that rolled-out IdM years ago still haven&rsquo;t achieved their goals: end-users keep calling the help de ... Fri, 26 Apr 2013 16:21:45 GMT http://www.infosecurity-magazine.com/blog/2013/4/26/cloudbased-identity-management-best-practices-for-rapid-enduser-adoption/879.aspx Will CISPA pass this time? http://www.infosecurity-magazine.com/blog/2013/4/22/will-cispa-pass-this-time/873.aspx <p>Recently the controversial Cyber Information Sharing and Protection Act (CISPA) was <a href="http://www.infosecurity-magazine.com/view/31934/cispa-passes-us-house-under-veto-threat">passed by the US House</a> of Representatives for the second time. The bill would mean that technology and web comp ... Mon, 22 Apr 2013 16:22:03 GMT http://www.infosecurity-magazine.com/blog/2013/4/22/will-cispa-pass-this-time/873.aspx Live on-stand interviews & wine: What we're up to at Infosecurity Europe... http://www.infosecurity-magazine.com/blog/2013/4/19/live-onstand-interviews--wine-what-were-up-to-at-infosecurity-europe/870.aspx <p>Well, it's our last day in the office before we all go on site for <a href="http://www.infosec.co.uk ">Infosecurity Europe</a> next week. There's a lot of excitement (and panic!) in the air...A few bits of news about what myself and the rest of team<em> Infosecurity </em>will be up to at the even ... Fri, 19 Apr 2013 11:45:38 GMT http://www.infosecurity-magazine.com/blog/2013/4/19/live-onstand-interviews--wine-what-were-up-to-at-infosecurity-europe/870.aspx At War with the World http://www.infosecurity-magazine.com/blog/2013/4/18/at-war-with-the-world/869.aspx <p>In February, security firm Mandiant made headlines when<a href="http://www.infosecurity-magazine.com/view/30797/security-firm-accuses-chinese-military-of-involvement-in-worldwide-hacking"> they declared the hacking team APT1, &ldquo;likely government-sponsored and one of the most persistent of Ch ... Thu, 18 Apr 2013 15:45:23 GMT http://www.infosecurity-magazine.com/blog/2013/4/18/at-war-with-the-world/869.aspx Web Scrubbing in China http://www.infosecurity-magazine.com/blog/2013/4/15/web-scrubbing-in-china/866.aspx <p><span style="">Within days of China being pinpointed as the home of a massive hacking base, the BBC has alleged that China has been regularly blocking their radio and TV broadcasts and their Chinese-language website.&nbsp;A BBC news crew </span><a href="http://www.pressgazette.co.uk/bbc-china-cre ... Mon, 15 Apr 2013 15:03:06 GMT http://www.infosecurity-magazine.com/blog/2013/4/15/web-scrubbing-in-china/866.aspx Cloud APIs - the Next Battleground for Denial-of-Service Attacks http://www.infosecurity-magazine.com/blog/2013/4/13/cloud-apis--the-next-battleground-for-denialofservice-attacks-/865.aspx <h5>By Mark O&rsquo;Neill</h5> <p>In recent months, there have been a number of <a href="http://www.infosecurity-magazine.com/view/30130/wave-of-hacking-attacks-on-us-banks-continues-with-botnet-addition">highly publicized cyber attacks on US banks</a>. These attacks took the form of Distributed De ... Sat, 13 Apr 2013 15:00:45 GMT http://www.infosecurity-magazine.com/blog/2013/4/13/cloud-apis--the-next-battleground-for-denialofservice-attacks-/865.aspx All that Glitters is Not Gold http://www.infosecurity-magazine.com/blog/2013/4/12/all-that-glitters-is-not-gold/863.aspx <p>The old saying &ldquo;all that glitters is not gold&rdquo; can have a particular resonance with us in the Information Security profession, especially at this time of the year. I say this as we are now starting to move into the heart of the information security conference season; the RSA Conferenc ... Fri, 12 Apr 2013 01:29:19 GMT http://www.infosecurity-magazine.com/blog/2013/4/12/all-that-glitters-is-not-gold/863.aspx Policing the Virtual Perimeter http://www.infosecurity-magazine.com/blog/2013/4/11/policing-the-virtual-perimeter/862.aspx <p>A recent spate of targeted denial of service attacks on organisations such as <a href="http://www.infosecurity-magazine.com/view/31522/spamhaus-suffers-largest-ddos-attack-in-history-entire-internet-affected">Spamhaus</a> and <a href="http://www.infosecurity-magazine.com/view/31633/bitcoin-hacker ... Thu, 11 Apr 2013 18:01:17 GMT http://www.infosecurity-magazine.com/blog/2013/4/11/policing-the-virtual-perimeter/862.aspx Kaspersky Lab – Russia’s IT Security Jewel http://www.infosecurity-magazine.com/blog/2013/4/10/kaspersky-lab--russias-it-security-jewel/860.aspx <p>Naming a company you founded after yourself can be problematic. OK, no one tries to place the blame for HP&rsquo;s recent woes on Bill Hewlett or Dave Packard (anyway, <a href="http://www.hpnext.com">according to HP&rsquo;s current management</a> a big turnaround in fortune is underway). However, ... Wed, 10 Apr 2013 14:05:57 GMT http://www.infosecurity-magazine.com/blog/2013/4/10/kaspersky-lab--russias-it-security-jewel/860.aspx A Little too Much Access, Thank You http://www.infosecurity-magazine.com/blog/2013/3/29/a-little-too-much-access-thank-you/849.aspx <p>So now that it appears the <a href="http://www.nytimes.com/2013/03/27/technology/internet/online-dispute-becomes-internet-snarling-attack.html?_r=0">Internet Apocalypse </a>is over and we can all return to life as we know it, (assuming we <a href="https://securosis.com/blog/ddos-attack-overblown" ... Fri, 29 Mar 2013 15:14:57 GMT http://www.infosecurity-magazine.com/blog/2013/3/29/a-little-too-much-access-thank-you/849.aspx Of Sequestration & Cybersecurity Frustrations… http://www.infosecurity-magazine.com/blog/2013/3/29/of-sequestration--cybersecurity-frustrations/848.aspx <div>With sequestration cuts underway across the federal government, and the plight of the federal information security workforce being traditionally viewed as non-mission essential, one can only hope that the historically underfunded budgets of the federal CISO will survive the carving knives of th ... Fri, 29 Mar 2013 14:36:52 GMT http://www.infosecurity-magazine.com/blog/2013/3/29/of-sequestration--cybersecurity-frustrations/848.aspx Going Up? Safety First, then Send your Data to the Cloud http://www.infosecurity-magazine.com/blog/2013/3/28/going-up-safety-first-then-send-your-data-to-the-cloud/847.aspx <h5>By Joe Sturonas</h5> <p>As the proliferation of data continues to plague businesses, the pressure is on for companies to migrate away from their physical data centers. Cloud computing is being adopted at a rapid rate because it addresses not only the costs for physical space, but also rising en ... Thu, 28 Mar 2013 15:02:14 GMT http://www.infosecurity-magazine.com/blog/2013/3/28/going-up-safety-first-then-send-your-data-to-the-cloud/847.aspx A Chat with Dimension Data: Data Centric Security, Data Breaches, and Why Old is New in Security http://www.infosecurity-magazine.com/blog/2013/3/27/-a-chat-with-dimension-data-data-centric-security-data-breaches-and-why-old-is-new-in-security-/845.aspx <div>This week I sat down with <a href="http://blog.dimensiondata.com/2012/05/enterprise-security-the-usual-suspects-still-dominate/">Anna Watson</a>, general manager of security solutions, Europe, at <a href="http://www.dimensiondata.com/rgn/uk/Pages/Home.aspx">Dimension Data</a>, to have a chat ab ... Wed, 27 Mar 2013 09:23:48 GMT http://www.infosecurity-magazine.com/blog/2013/3/27/-a-chat-with-dimension-data-data-centric-security-data-breaches-and-why-old-is-new-in-security-/845.aspx How to Harden Your APIs http://www.infosecurity-magazine.com/blog/2013/3/26/how-to-harden-your-apis/844.aspx <h5>By Andy Thurai</h5> <p>The market for APIs has experienced explosive growth in recent years, yet the major issues that providers still face are protection and hardening of the APIs that they expose to users. In particular, when you are exposing APIs from a cloud-based platform, this becomes ver ... Tue, 26 Mar 2013 18:04:45 GMT http://www.infosecurity-magazine.com/blog/2013/3/26/how-to-harden-your-apis/844.aspx If Your iPhone Could Talk... http://www.infosecurity-magazine.com/blog/2013/3/25/if-your-iphone-could-talk/843.aspx <p>Andy Greenberg at <a href="http://www.forbes.com/sites/andygreenberg/2013/02/26/heres-what-law-enforcement-can-recover-from-a-seized-iphone/"><em>Forbes</em></a> has shown us the information that law enforcement can recover via a seized iPhone. The article is essentially in response to one <a hre ... Mon, 25 Mar 2013 18:56:16 GMT http://www.infosecurity-magazine.com/blog/2013/3/25/if-your-iphone-could-talk/843.aspx Three Critical Features that Define an Enterprise-Grade Cloud Service http://www.infosecurity-magazine.com/blog/2013/3/22/three-critical-features-that-define-an-enterprisegrade-cloud-service/841.aspx <h5>By David Baker</h5> <p>The line between enterprise and consumer is fading as employees work from all manner of devices to access the on-premises, cloud and even consumer applications needed to get work done. But it&rsquo;s important to not confuse enterprise and consumer services from a securit ... Fri, 22 Mar 2013 19:32:30 GMT http://www.infosecurity-magazine.com/blog/2013/3/22/three-critical-features-that-define-an-enterprisegrade-cloud-service/841.aspx Why Should I Get My Certificate of Cloud Security Knowledge (CCSK)? Or Train to be a CCSK Trainer? http://www.infosecurity-magazine.com/blog/2013/3/20/why-should-i-get-my-certificate-of-cloud-security-knowledge-ccsk-or-train-to-be-a-ccsk-trainer/837.aspx <blockquote> <p><em>&ldquo;The CSA, in providing a set of goals through the CCSK, is challenging security practitioners to become the cloud thought-leaders we need today and tomorrow to ensure safe and secure cloud environments. In developing the CCSK, CSA is 'setting the bar' for security professi ... Wed, 20 Mar 2013 20:14:02 GMT http://www.infosecurity-magazine.com/blog/2013/3/20/why-should-i-get-my-certificate-of-cloud-security-knowledge-ccsk-or-train-to-be-a-ccsk-trainer/837.aspx The Shrinking Security Model: Micro-perimeters http://www.infosecurity-magazine.com/blog/2013/3/20/the-shrinking-security-model-microperimeters/836.aspx <h5>By Ed King</h5> <p>As cloud and mobile computing make enterprise IT ever more extended, the traditional security model of keeping the bad guys out and allowing only the good guys in no longer works well. While the reach of the enterprise has expanded, the security perimeter may actually have t ... Wed, 20 Mar 2013 19:14:24 GMT http://www.infosecurity-magazine.com/blog/2013/3/20/the-shrinking-security-model-microperimeters/836.aspx My morning at CrestCon/IISP Conference http://www.infosecurity-magazine.com/blog/2013/3/20/my-morning-at-crestconiisp-conference-/835.aspx <p>So far, I&rsquo;ve listened to three talks - sadly I wasn&rsquo;t allowed to attend the keynote given by CESG &ndash; and will be returning after lunch (I&rsquo;m currently camped out in Caf&eacute; Nero regaining some charge on my laptop and iPhone) to hear some more.</p> <h4>Information securi ... Wed, 20 Mar 2013 14:29:31 GMT http://www.infosecurity-magazine.com/blog/2013/3/20/my-morning-at-crestconiisp-conference-/835.aspx Net Neutrality: Is it Necessary? http://www.infosecurity-magazine.com/blog/2013/3/15/net-neutrality-is-it-necessary/833.aspx <p>At the moment, the US Federal Communications Commission (FCC) is fighting an on-going legal battle with the telecommunications company Verizon over their <a href="http://gigaom.com/2012/07/03/inside-verizons-attack-on-network-neutrality/">net neutrality rules</a>, which were initially proposed in ... Fri, 15 Mar 2013 16:22:15 GMT http://www.infosecurity-magazine.com/blog/2013/3/15/net-neutrality-is-it-necessary/833.aspx I Want My Nua Mek 2...Yes, Hackers Watch TV Too http://www.infosecurity-magazine.com/blog/2013/3/14/i-want-my-nua-mek-2yes-hackers-watch-tv-too/831.aspx <p>We&rsquo;ve all been disappointed when a favorite show is canceled, be it <em>Arrested Development</em>, <em>Freaks and Geeks</em> or, more recently, <em>666 Park Avenue</em> (err&hellip;or is that just me?). But Thailand&rsquo;s National Broadcasting Commission (NBC) got more than it bargained f ... Thu, 14 Mar 2013 19:11:28 GMT http://www.infosecurity-magazine.com/blog/2013/3/14/i-want-my-nua-mek-2yes-hackers-watch-tv-too/831.aspx The Age of Bring-Your-Own-Identity (BYOID) http://www.infosecurity-magazine.com/blog/2013/3/11/the-age-of-bringyourownidentity-byoid/825.aspx <p>Sellers of computer security products and services sometimes fret that their messaging is too scary as they go on about risk, data loss and regulatory fines. To get around this, every so often they like to remind potential buyers that their wares are also business enablers. The case is easier to ... Mon, 11 Mar 2013 11:19:14 GMT http://www.infosecurity-magazine.com/blog/2013/3/11/the-age-of-bringyourownidentity-byoid/825.aspx It’s McAfee. James McAfee. http://www.infosecurity-magazine.com/blog/2013/3/5/its-mcafee-james-mcafee/823.aspx <p>A game of high-stakes, technical espionage that targets the highest levels of government? A bevy of presumably beautiful female double agents? A nefarious foe bent on the destruction of the US, operating in the shadows under a cover of legitimacy? These are not the trappings of a new James Bond i ... Tue, 05 Mar 2013 20:34:49 GMT http://www.infosecurity-magazine.com/blog/2013/3/5/its-mcafee-james-mcafee/823.aspx APTs and Oscar Wilde http://www.infosecurity-magazine.com/blog/2013/3/1/apts-and-oscar-wilde/820.aspx <p>&ldquo;The only thing worse than being the victim of an APT is *not* being the victim of an APT.&rdquo;&nbsp;</p> <p>Or, at least, that&rsquo;s probably how Oscar Wilde would have seen it, had he been following the news recently.<br /> (He rather famously said something similar when told that a ... Fri, 01 Mar 2013 19:54:20 GMT http://www.infosecurity-magazine.com/blog/2013/3/1/apts-and-oscar-wilde/820.aspx The Trouble Heading for your Business in 2013 http://www.infosecurity-magazine.com/blog/2013/3/1/the-trouble-heading-for-your-business-in-2013-/818.aspx <div style="margin-bottom:0cm;margin-bottom:.0001pt">Facebook, Twitter, Apple and Microsoft: all icons of the information technology industry and all the focus of targeted attacks in Feb 2013. The bad news for us all is, that even those that should be some of the most tech-savvy companies in the wor ... Fri, 01 Mar 2013 13:58:23 GMT http://www.infosecurity-magazine.com/blog/2013/3/1/the-trouble-heading-for-your-business-in-2013-/818.aspx Cruising the Misinformation Superhighway http://www.infosecurity-magazine.com/blog/2013/2/28/cruising-the-misinformation-superhighway/817.aspx <p>&nbsp;</p> <div>Long before there was a World Wide Web, when the internet was largely a playground for academics and the military, and most people still thought spam was a canned meat, there were already hoaxes and scams (pyramid schemes, Ponzi schemes, lures into premium rate phone services, fa ... Thu, 28 Feb 2013 13:23:58 GMT http://www.infosecurity-magazine.com/blog/2013/2/28/cruising-the-misinformation-superhighway/817.aspx Censorship’s Losing Battle in China http://www.infosecurity-magazine.com/blog/2013/2/27/censorships-losing-battle-in-china/816.aspx <p>Recently, <a href="http://www.telegraph.co.uk/technology/twitter/9787989/Twitter-of-the-East-enjoys-the-last-word.html">Brad Pitt was the latest celebrity to join up to China&rsquo;s foremost micro-blogging platform, Sina Weibo</a>, joining the likes of Selena Gomez, Paris Hilton, Emma Watson, an ... Wed, 27 Feb 2013 15:49:25 GMT http://www.infosecurity-magazine.com/blog/2013/2/27/censorships-losing-battle-in-china/816.aspx RSA 2013: Interview with security evangelist Stephen Cobb http://www.infosecurity-magazine.com/blog/2013/2/27/rsa-2013-interview-with-security-evangelist-stephen-cobb-/814.aspx <p> <p>I&rsquo;ve just spent a fascinating 45 minutes picking the brain of ESET security evangelist, Stephen Cobb.&nbsp;</p> </p> <p>Below are the key statements made by <a href="http://www.eset.co.uk/">ESET</a>'s <a href="http://www.welivesecurity.com/author/scobb/page/2/?wpmp_switcher=desktop"> ... Wed, 27 Feb 2013 02:04:16 GMT http://www.infosecurity-magazine.com/blog/2013/2/27/rsa-2013-interview-with-security-evangelist-stephen-cobb-/814.aspx Language is a Virus (Editorial from Q1 issue) http://www.infosecurity-magazine.com/blog/2013/2/25/language-is-a-virus-editorial-from-q1-issue/810.aspx <p>This year we are scaling back on the quantity of issues produced (the magazine will now&nbsp;be published quarterly) in order to allow the editorial team to increase the output of online content.&nbsp;</p> <p>Not only will we be producing more daily news stories, but we will be publishing featur ... Mon, 25 Feb 2013 02:25:24 GMT http://www.infosecurity-magazine.com/blog/2013/2/25/language-is-a-virus-editorial-from-q1-issue/810.aspx Finally, a Step Forward in Cybersecurity http://www.infosecurity-magazine.com/blog/2013/2/21/finally-a-step-forward-in-cybersecurity/808.aspx <!--[if gte mso 9]><xml> <o:DocumentProperties> <o:Revision>0</o:Revision> <o:TotalTime>0</o:TotalTime> <o:Pages>1</o:Pages> <o:Words>502</o:Words> <o:Characters>2784</o:Characters> <o:Company>Extension Group</o:Company> <o:Lines>48</o:Lines> <o:Paragraphs>7</o:Paragraphs> ... Thu, 21 Feb 2013 22:30:18 GMT http://www.infosecurity-magazine.com/blog/2013/2/21/finally-a-step-forward-in-cybersecurity/808.aspx When Good Is Not Good Enough: NIST Raises the Bar for Cloud Data Protection Vendors http://www.infosecurity-magazine.com/blog/2013/2/21/when-good-is-not-good-enough-nist-raises-the-bar-for-cloud-data-protection-vendors/807.aspx <h5>By David Stott</h5> <p>Earlier this year, the US&nbsp;National Institute of Standards and Technology (NIST) released a publication titled <a href="http://www.nist.gov/customcf/get_pdf.cfm?pub_id=911075">Cloud Computing Synopsis &amp; Recommendations (Special Publication 800-146)</a> describing ... Thu, 21 Feb 2013 21:01:02 GMT http://www.infosecurity-magazine.com/blog/2013/2/21/when-good-is-not-good-enough-nist-raises-the-bar-for-cloud-data-protection-vendors/807.aspx The Low-down on the Booth Babe Crack-down http://www.infosecurity-magazine.com/blog/2013/2/20/the-lowdown-on-the-booth-babe-crackdown/802.aspx <p>This week, Reed Exhibitions, organisers of the<a href="http://www.infosec.co.uk/"> Infosecurity Europe</a> event, announced changes to their Ts and Cs that outlaw the use of &lsquo;booth babes&rsquo; (more formally known as scantily clad women) to attract foot traffic to their booth. (The use of ... Wed, 20 Feb 2013 12:30:48 GMT http://www.infosecurity-magazine.com/blog/2013/2/20/the-lowdown-on-the-booth-babe-crackdown/802.aspx ISSA European Conference: A talk from Right Honorurable David Davis, MP http://www.infosecurity-magazine.com/blog/2013/2/14/issa-european-conference-a-talk-from-right-honorurable-david-davis-mp/800.aspx <p>I attended the <a href="http://www.issa.org/events/event_details.asp?id=278091">ISSA European Conference</a> last week, and was pleasantly surprised by a fantastic speaker line-up and some excellent content.</p> <p>The agenda was kicked off by <a href="http://en.wikipedia.org/wiki/David_Davis_(B ... Thu, 14 Feb 2013 16:51:10 GMT http://www.infosecurity-magazine.com/blog/2013/2/14/issa-european-conference-a-talk-from-right-honorurable-david-davis-mp/800.aspx Internet Pioneer Speaks Out on Privacy, Governance, and Internet Tax http://www.infosecurity-magazine.com/blog/2013/2/11/internet-pioneer-speaks-out-on-privacy-governance-and-internet-tax/795.aspx <p>&nbsp;</p> <div style="text-align: left;"><span style="">In an interesting addition to the everlasting debate about internet censorship &ndash; specifically on the idea of an 'Internet Tax' &ndash; one of the creators of the internet has spoken out about his views on how strange the notion is, a ... Mon, 11 Feb 2013 17:48:17 GMT http://www.infosecurity-magazine.com/blog/2013/2/11/internet-pioneer-speaks-out-on-privacy-governance-and-internet-tax/795.aspx Mac AV Testing: How Useful Is It? http://www.infosecurity-magazine.com/blog/2013/1/29/mac-av-testing-how-useful-is-it/781.aspx <p>&nbsp;</p> <div><span style="Times New Roman&quot;;Times New Roman&quot;">I <a href="http://antimalwaretesting.wordpress.com/2013/01/10/mac-testing-static-versus-dynamic/">commented recently</a> (on an independent AV testing-related blog) on a <a href="http://www.intego.com/mac-security-blog/tha ... Tue, 29 Jan 2013 13:33:46 GMT http://www.infosecurity-magazine.com/blog/2013/1/29/mac-av-testing-how-useful-is-it/781.aspx Brace Yourselves, Europe: The Lawyers are Coming http://www.infosecurity-magazine.com/blog/2013/1/23/brace-yourselves-europe-the-lawyers-are-coming/775.aspx <p>Peter Fleischer, an American in Paris who is also Google&rsquo;s Global Privacy Counsel, knows a bit about privacy and law. <a href="http://peterfleischer.blogspot.co.uk/2012/10/privacy-litigation-get-ready-for.html">Writing in his own blog</a>, he has warned Europe to expect a litigious explosio ... Wed, 23 Jan 2013 19:51:46 GMT http://www.infosecurity-magazine.com/blog/2013/1/23/brace-yourselves-europe-the-lawyers-are-coming/775.aspx Censorship in China: What is Really at Stake? http://www.infosecurity-magazine.com/blog/2013/1/21/censorship-in-china-what-is-really-at-stake/764.aspx <p>Recently, <a href="http://www.guardian.co.uk/technology/2012/dec/14/china-tightens-great-firewall-internet-control">China has tightened its control over VPNs</a>&nbsp;(virtual private networks), the systems that allowed many of its people to access banned sites. Basically, a VPN is a private netw ... Mon, 21 Jan 2013 16:30:39 GMT http://www.infosecurity-magazine.com/blog/2013/1/21/censorship-in-china-what-is-really-at-stake/764.aspx RSA: The Light at the End of the Tunnel http://www.infosecurity-magazine.com/blog/2013/1/11/rsa-the-light-at-the-end-of-the-tunnel-/758.aspx <p>I&rsquo;m a great sufferer of the January blues and associate them with many negative connotations. However, the one bit of sunshine at the end of the tunnel every January is the imminent RSA Conference in San Francisco.</p> <p>It doesn&rsquo;t take a genius to work out why the promise of a week ... Fri, 11 Jan 2013 17:58:40 GMT http://www.infosecurity-magazine.com/blog/2013/1/11/rsa-the-light-at-the-end-of-the-tunnel-/758.aspx Pirates in the Cloud http://www.infosecurity-magazine.com/blog/2013/1/10/pirates-in-the-cloud/756.aspx <p>The <a href="http://www.infosecurity-magazine.com/view/23371/anonymous-launches-attack-in-response-to-fbis-megaupload-takedown">FBI takedown of Megaupload</a> one year ago was a PR fiasco, and quite possibly, a practical disaster for law enforcement and rights holders. The image of armed police s ... Thu, 10 Jan 2013 17:55:03 GMT http://www.infosecurity-magazine.com/blog/2013/1/10/pirates-in-the-cloud/756.aspx Jailbreaking: Not Just a Sport for iPhone Users http://www.infosecurity-magazine.com/blog/2013/1/9/jailbreaking-not-just-a-sport-for-iphone-users/754.aspx <p>I just came across an interesting blog by Lysa Myers (for Intego) on jailbreaking: <a data-mce-href="http://www.intego.com/mac-security-blog/the-latest-in-jailbreaking-will-malware-follow/" rel="bookmark" href="http://www.intego.com/mac-security-blog/the-latest-in-jailbreaking-will-malware-follow ... Wed, 09 Jan 2013 12:00:34 GMT http://www.infosecurity-magazine.com/blog/2013/1/9/jailbreaking-not-just-a-sport-for-iphone-users/754.aspx The Western Machinery of Surveillance Weapons http://www.infosecurity-magazine.com/blog/2012/12/21/the-western-machinery-of-surveillance-weapons/747.aspx <p>&nbsp;</p> <div>On December 11 of this year, Reporters Without Borders and Human Rights Watch jointly released a press release calling for the EU to enact new controls on internet censorship and surveillance technologies that are regularly being <a href="http://www.hrw.org/news/2012/12/11/eu-ena ... Fri, 21 Dec 2012 16:09:32 GMT http://www.infosecurity-magazine.com/blog/2012/12/21/the-western-machinery-of-surveillance-weapons/747.aspx 1.5 Factor Authentication: Myth or Fact? http://www.infosecurity-magazine.com/blog/2012/12/20/15-factor-authentication-myth-or-fact/746.aspx <p>&nbsp;Last week, I met with Steven Hope, technical director at <a href="http://www.winfrasoft.com/">Winfrasoft</a>, a multi-factor authentication company.</p> <p>As Hope was introducing me to the company and their suite of products, he listed everything they offer: &ldquo;PINgrid, PINphrase and ... Thu, 20 Dec 2012 17:53:50 GMT http://www.infosecurity-magazine.com/blog/2012/12/20/15-factor-authentication-myth-or-fact/746.aspx False Positives and the Disposition Matrix http://www.infosecurity-magazine.com/blog/2012/12/20/false-positives-and-the-disposition-matrix/745.aspx <p>The bane of databases is the false positive &ndash; the inclusion of an entry that shouldn&rsquo;t be there. For anti-malware databases, false positives are inconvenient: good software is blocked because it is believed to be bad. For human databases it can be equally inconvenient: a false positiv ... Thu, 20 Dec 2012 16:49:56 GMT http://www.infosecurity-magazine.com/blog/2012/12/20/false-positives-and-the-disposition-matrix/745.aspx CipherCloud: Expansion into Europe, Investment, and The Cost of a Data Breach http://www.infosecurity-magazine.com/blog/2012/12/20/ciphercloud-expansion-into-europe-investment-and-the-cost-of-a-data-breach-/744.aspx <p>The week that <a href="http://www.ciphercloud.com/">CipherCloud</a> announced it had received <a href="http://www.ciphercloud.com/Company/PressReleases/tabid/106/NewsId/39/CipherCloud-Closes-30-Million-Investment-Round-with-Andreessen-Horowitz.aspx">$30 million in new funding</a> from Andreessen ... Thu, 20 Dec 2012 16:30:51 GMT http://www.infosecurity-magazine.com/blog/2012/12/20/ciphercloud-expansion-into-europe-investment-and-the-cost-of-a-data-breach-/744.aspx Commercial Anti-virus vs. Microsoft http://www.infosecurity-magazine.com/blog/2012/12/19/commercial-antivirus-vs-microsoft/743.aspx <p>It&rsquo;s often the case when I set out and write a news feature that I typically end up with far more copy than space allotted in our print edition. My most recent <a href="http://www.infosecurity-magazine.com/view/29913/in-windows-we-trust/">feature on Windows 8 security</a> is no exception. T ... Wed, 19 Dec 2012 18:32:22 GMT http://www.infosecurity-magazine.com/blog/2012/12/19/commercial-antivirus-vs-microsoft/743.aspx Mayan Hangover http://www.infosecurity-magazine.com/blog/2012/12/18/mayan-hangover/741.aspx <p>It&rsquo;s not often that having a background in both archeology and technology seems useful, but when you&rsquo;re facing the end-of-the-world-as-we-know-it, then it&rsquo;s surprising what becomes relevant.</p> <p>On Dec 21st, the 13th b'ak'tun in the Mayan calendar comes to an end and the fol ... Tue, 18 Dec 2012 21:38:29 GMT http://www.infosecurity-magazine.com/blog/2012/12/18/mayan-hangover/741.aspx 2013: The Year for Privacy? http://www.infosecurity-magazine.com/blog/2012/12/18/2013-the-year-for-privacy/740.aspx <p>As we approach the end of the year it is only natural that people start looking forward to what may happen in the upcoming New Year. My inbox, like everyone else&rsquo;s, has been flooded with messages from vendors predicting the threats that we will face in 2013, and by some strange twist of fat ... Tue, 18 Dec 2012 16:35:36 GMT http://www.infosecurity-magazine.com/blog/2012/12/18/2013-the-year-for-privacy/740.aspx Send in the Clones http://www.infosecurity-magazine.com/blog/2012/12/17/send-in-the-clones/735.aspx <p>&nbsp;</p> <div>The longer you stay in this game, the more obsolete information you have cluttering up your memory cells. Technology moves quickly, and in the tug o&rsquo; war o&rsquo; attrition between malware and anti-malware, the effective lifetime of a specific malicious binary is often very ... Mon, 17 Dec 2012 14:40:40 GMT http://www.infosecurity-magazine.com/blog/2012/12/17/send-in-the-clones/735.aspx An Interview with Jamie Pearce, WatchGuard Technologies http://www.infosecurity-magazine.com/blog/2012/12/14/an-interview-with-jamie-pearce-watchguard-technologies/731.aspx <p>During a lovely lunch at Kettners with <a href="http://www.watchguard.com/">WatchGuard&rsquo;</a>s UK &amp; Ireland regional sales manager, Jamie Pearce, we talked UTM performance issues, 2013 threats, and the advantages of an industry rich in M&amp;A&hellip;</p> <p><a href="http://www.infosecur ... Fri, 14 Dec 2012 09:54:25 GMT http://www.infosecurity-magazine.com/blog/2012/12/14/an-interview-with-jamie-pearce-watchguard-technologies/731.aspx Cybersecurity’s “Fiscal Cliff” http://www.infosecurity-magazine.com/blog/2012/12/13/cybersecuritys-fiscal-cliff/729.aspx <p>Regardless of how the profession has evolved, or what the specific challenges are facing your sector, one thing has remained constant in the information security field for some time: the demand for qualified professionals has generated nearly full employment for the industry. This comes at a time ... Thu, 13 Dec 2012 15:26:06 GMT http://www.infosecurity-magazine.com/blog/2012/12/13/cybersecuritys-fiscal-cliff/729.aspx An Interview with Aidan Simister, Netwrix http://www.infosecurity-magazine.com/blog/2012/12/12/an-interview-with-aidan-simister-netwrix-/728.aspx <p>I recently met with <a href="http://www.youtube.com/watch?v=fdGoDvS6JV4">Aidan Simister</a>, country manager, UK &amp; Ireland,<a href="http://www.netwrix.com/uk/change_auditing.html"> NetWrix</a>, at the W hotel in Leicester Square.</p> <p>You may not be familiar with NetWrix if you are UK-base ... Wed, 12 Dec 2012 14:27:30 GMT http://www.infosecurity-magazine.com/blog/2012/12/12/an-interview-with-aidan-simister-netwrix-/728.aspx It’s a Man’s Man’s World http://www.infosecurity-magazine.com/blog/2012/12/10/its-a-mans-mans-world/724.aspx <p>&nbsp;So, I should probably begin with a disclaimer. I am a woman working in the infosecurity industry, which arguably makes me biased, but certainly puts me in a position to comment on this much-debated topic: the lack of women in information security.</p> <p>At the <a href="http://www.rsaconfe ... Mon, 10 Dec 2012 15:16:08 GMT http://www.infosecurity-magazine.com/blog/2012/12/10/its-a-mans-mans-world/724.aspx OSX/Flashback isn't Necessarily the Newsflash http://www.infosecurity-magazine.com/blog/2012/12/7/osxflashback-isnt-necessarily-the-newsflash/722.aspx <p>&nbsp;</p> <div>As the pseudonymous Old Mac Bloggit &ndash; my colleague at Mac Virus &ndash; has <a href="https://macviruscom.wordpress.com/2012/12/07/sophos-threat-report/">already noted</a>, there&rsquo;s some interesting Mac-related content included in the Sophos Security Threat Report 2012 ... Fri, 07 Dec 2012 18:08:11 GMT http://www.infosecurity-magazine.com/blog/2012/12/7/osxflashback-isnt-necessarily-the-newsflash/722.aspx Is Your Computer Photochromatic? http://www.infosecurity-magazine.com/blog/2012/12/6/is-your-computer-photochromatic/721.aspx <p>Earlier this year Google showed off its prototype for the long-awaited Google Glass, described as &ldquo;a stamp-sized electronic screen mounted on the left side of a pair of eyeglass frames which can record video, access email and messages, and retrieve information from the Web.&rdquo; The glass ... Thu, 06 Dec 2012 19:54:50 GMT http://www.infosecurity-magazine.com/blog/2012/12/6/is-your-computer-photochromatic/721.aspx Apple’s Next Target? A Polish Grocer http://www.infosecurity-magazine.com/blog/2012/12/6/apples-next-target-a-polish-grocer/720.aspx <p>Cult of Android, the online antidote to the online Cult of Mac, <a href="http://www.cultofandroid.com/16057/not-even-polish-sausage-is-safe-from-apples-ego/">announced</a> on September 13: &ldquo;Ladies and gentlemen, I wish I was making this up, but unfortunately I&rsquo;m not... They&rsquo;ve a ... Thu, 06 Dec 2012 19:49:34 GMT http://www.infosecurity-magazine.com/blog/2012/12/6/apples-next-target-a-polish-grocer/720.aspx OSX/Dockster Spyware http://www.infosecurity-magazine.com/blog/2012/12/3/osxdockster-spyware/715.aspx <p>On November 30th, Intego blogged about OS X spyware it calls <a href="http://www.intego.com/mac-security-blog/new-mac-spyware-discovered-osxdockster-a/">OSX/Dockster.A</a>. This relatively simple backdoor trojan, found on<a href="http://virustotal.com/"> Virus Total</a>, provides a remote shell t ... Mon, 03 Dec 2012 21:24:28 GMT http://www.infosecurity-magazine.com/blog/2012/12/3/osxdockster-spyware/715.aspx Could Censorship be Necessary? http://www.infosecurity-magazine.com/blog/2012/12/3/could-censorship-be-necessary/714.aspx <p>On the first of November this year, <a href="http://www.guardian.co.uk/world/2012/nov/12/censorship-row-russian-internet-blacklist">a law was passed</a> in Russia banning certain internet sites devoted to drug-use, pornography, and suicide. Experts have warned that this law could be used as a pre ... Mon, 03 Dec 2012 15:39:56 GMT http://www.infosecurity-magazine.com/blog/2012/12/3/could-censorship-be-necessary/714.aspx In Deep Space, No-one Can See You Surf http://www.infosecurity-magazine.com/blog/2012/11/27/in-deep-space-noone-can-see-you-surf/710.aspx <p>The web is often described as cyberspace. Hold that image, and then travel into deep space &ndash; the dark web. You might see what looks like Saturn, surrounded by rings. But look closer and you&rsquo;ll find it&rsquo;s a black hole protected by onion rings.</p> <p>Enter Tor (the name is an acr ... Tue, 27 Nov 2012 17:46:05 GMT http://www.infosecurity-magazine.com/blog/2012/11/27/in-deep-space-noone-can-see-you-surf/710.aspx What's the Main Cause of Movie Piracy? http://www.infosecurity-magazine.com/blog/2012/11/27/whats-the-main-cause-of-movie-piracy/709.aspx <p>The main cause of movie piracy, says <a href="http://www.scientificamerican.com/article.cfm?id=how-hollywood-encouraging-onine-piracy"><em>Scientific American</em></a>, is movie makers themselves. DVDs are dying primarily because phones, tablets, netbooks and many new laptops simply don&rsquo;t ... Tue, 27 Nov 2012 17:38:58 GMT http://www.infosecurity-magazine.com/blog/2012/11/27/whats-the-main-cause-of-movie-piracy/709.aspx Symantec versus CA http://www.infosecurity-magazine.com/blog/2012/11/27/symantec-versus-ca/708.aspx <p>Two back-to-back events recently saw Quocirca talking to veterans of the software industry: CA and Symantec. The high-level message from both is pretty much to same &ndash;&nbsp;we help to secure and manage your data and IT infrastructure. Yet, it is rare to find these two head-to-head; because, ... Tue, 27 Nov 2012 12:02:10 GMT http://www.infosecurity-magazine.com/blog/2012/11/27/symantec-versus-ca/708.aspx An Interview with Bernard Parsons, CEO, BeCrypt… http://www.infosecurity-magazine.com/blog/2012/11/26/an-interview-with-bernard-parsons-ceo-becrypt/707.aspx <p>In the wonderfully opulent setting of the Savoy hotel, London, I recently met with the co-founder and CEO of <a href="http://www.becrypt.com/about-us/management-team">BeCrypt, Bernard Parsons,</a> and his colleague Keith Ricketts, head of marketing.</p> <p>Bernard Parsons isn&rsquo;t your typica ... Mon, 26 Nov 2012 15:11:44 GMT http://www.infosecurity-magazine.com/blog/2012/11/26/an-interview-with-bernard-parsons-ceo-becrypt/707.aspx A chat with Wolfgang Kandek, CTO, Qualys… http://www.infosecurity-magazine.com/blog/2012/11/26/a-chat-with-wolfgang-kandek-cto-qualys/703.aspx <p>On November 8th, I attended the <a href="http://www.qualys.com/company/events/tradeshows/2012/qsc/">Qualys Security Conference 2012 </a>at the Berkeley hotel in London. At the end of the day, I was lucky enough to catch up with <a href="http://laws.qualys.com/2012/02/february-patch-tuesday-2012-f ... Mon, 26 Nov 2012 01:24:26 GMT http://www.infosecurity-magazine.com/blog/2012/11/26/a-chat-with-wolfgang-kandek-cto-qualys/703.aspx An Interview with ForgeRock… http://www.infosecurity-magazine.com/blog/2012/11/21/an-interview-with-forgerock/699.aspx <p>Last week, I met with <a href="http://forgerock.com/who-we-are/team/">Daniel Raskin, VP marketing </a>at <a href="http://forgerock.com/">ForgeRock,</a> and John Barco, director of product marketing.</p> <p>You may not have heard of ForgeRock, I hadn&rsquo;t either, but that&rsquo;s because they& ... Wed, 21 Nov 2012 11:13:32 GMT http://www.infosecurity-magazine.com/blog/2012/11/21/an-interview-with-forgerock/699.aspx McAfee & Michelangelo http://www.infosecurity-magazine.com/blog/2012/11/19/mcafee--michelangelo/696.aspx <p>&nbsp;</p> <div>Without breaking any confidences, it&rsquo;s fair to say that the <a href="http://www.telegraph.co.uk/technology/internet-security/9680870/John-McAfee-sex-drugs-and-anti-virus-software.html">present troubles</a> of John McAfee, founder of the AV company that still bears his name, ... Mon, 19 Nov 2012 18:52:44 GMT http://www.infosecurity-magazine.com/blog/2012/11/19/mcafee--michelangelo/696.aspx Mobility, Cloud, and Elephants http://www.infosecurity-magazine.com/blog/2012/11/16/mobility-cloud-and-elephants/695.aspx <p>So the common response on how to handle big problems has always been the old adage of how to eat an elephant &ndash; one bite at a time.</p> <p>For most problems (and I presume, pachyderm gastronomes too) this seems to work well. However, we&rsquo;re facing a set of challenges for which that wis ... Fri, 16 Nov 2012 22:09:09 GMT http://www.infosecurity-magazine.com/blog/2012/11/16/mobility-cloud-and-elephants/695.aspx Are Operating System Vendors Really Selling Security? http://www.infosecurity-magazine.com/blog/2012/11/8/are-operating-system-vendors-really-selling-security/686.aspx <p>&nbsp;</p> <div><span style="Times New Roman&quot;;Times New Roman&quot;">In an IT Pro Portal article whose title says it all&nbsp;</span>&ndash;&nbsp;<a href="http://www.itproportal.com/2012/11/07/windows-vs-apple-os-x-security-market-share-more-important-than-product/">Windows vs Apple OS X se ... Thu, 08 Nov 2012 11:20:22 GMT http://www.infosecurity-magazine.com/blog/2012/11/8/are-operating-system-vendors-really-selling-security/686.aspx Absorbing DDoS; Akamai’s Kona security service http://www.infosecurity-magazine.com/blog/2012/11/7/absorbing-ddos-akamais-kona-security-service/684.aspx <p>Even amongst those outside the IT industry, it is popular to speculate where we would be without the internet; what would happen if you could switch if off over night? Those in the know like to point out that fault tolerance, through alternative routing, was one of this reasons for the internet&r ... Wed, 07 Nov 2012 17:44:12 GMT http://www.infosecurity-magazine.com/blog/2012/11/7/absorbing-ddos-akamais-kona-security-service/684.aspx The Battle of the Titans: What it all means for IT managers caught in the middle http://www.infosecurity-magazine.com/blog/2012/10/31/the-battle-of-the-titans-what-it-all-means-for-it-managers-caught-in-the-middle/678.aspx <h5>By Cesare Garlati</h5> <p>Adapt, accept and manage: a BYOD mantra for corporate IT</p> <p><img src="/_virtual/ck/image005.jpg" width="250" height="188" alt="" /></p> <p>RIM and Apple: two firms with more contrasting current fortunes you could not wish to imagine. The once high-flying Canadian ... Wed, 31 Oct 2012 18:52:24 GMT http://www.infosecurity-magazine.com/blog/2012/10/31/the-battle-of-the-titans-what-it-all-means-for-it-managers-caught-in-the-middle/678.aspx The High Costs of Securing Identities: How to Fix the Problem Using the Cloud http://www.infosecurity-magazine.com/blog/2012/10/26/the-high-costs-of-securing-identities-how-to-fix-the-problem-using-the-cloud/676.aspx <h5>By Dan Dagnall</h5> <p>Identity management is well down the path of a mature market space. But I believe there is still one final, fundamental disconnect that is driving up the cost of deploying and maintaining an identity management solution, and that is programming and customization.</p> <p ... Fri, 26 Oct 2012 20:17:48 GMT http://www.infosecurity-magazine.com/blog/2012/10/26/the-high-costs-of-securing-identities-how-to-fix-the-problem-using-the-cloud/676.aspx How Do You Define a Data Breach? http://www.infosecurity-magazine.com/blog/2012/10/19/how-do-you-define-a-data-breach/673.aspx <p>As I have promised in previous posts, I will continue to use this space to publish comments and letters we receive on our coverage. This most recent comment came from someone read our news item a few weeks ago about the <a href="http://www.infosecurity-magazine.com/view/28544/white-house-targette ... Fri, 19 Oct 2012 19:47:39 GMT http://www.infosecurity-magazine.com/blog/2012/10/19/how-do-you-define-a-data-breach/673.aspx The Nature of Political Censorship http://www.infosecurity-magazine.com/blog/2012/10/19/the-nature-of-political-censorship/672.aspx <p>&nbsp;</p> <div style="text-align: left; "><span style="">When it comes to internet censorship, of course the first apparent problem is the infringement of basic human rights, including freedom of speech and the sharing of information.&nbsp;However, when it comes to practical attempts to censor ... Fri, 19 Oct 2012 07:10:35 GMT http://www.infosecurity-magazine.com/blog/2012/10/19/the-nature-of-political-censorship/672.aspx Context + Analytics = Good Security http://www.infosecurity-magazine.com/blog/2012/10/17/context--analytics--good-security/671.aspx <h5>By Jon-Louis Heimerl</h5> <blockquote> <p><strong>Data</strong> [dey-tuh] noun: individual facts or statistics</p> <p><strong>Information</strong> [in-fer-mey-shuhn] noun: knowledge concerning a particular fact or circumstance</p> </blockquote> <p>When does data become consumable informatio ... Wed, 17 Oct 2012 18:35:18 GMT http://www.infosecurity-magazine.com/blog/2012/10/17/context--analytics--good-security/671.aspx The Test of Time http://www.infosecurity-magazine.com/blog/2012/10/13/the-test-of-time/668.aspx <p>&nbsp;</p> <div>So you&rsquo;ve seen all the stories about the rising tide of Mac malware. Maybe you&rsquo;ve noticed that the fanboi cries of &ldquo;Macs are secure! There are no Mac viruses!&rdquo; have been a little muted lately, and that OSX/Flashback managed to recruit a sizeable number of ... Sat, 13 Oct 2012 17:51:11 GMT http://www.infosecurity-magazine.com/blog/2012/10/13/the-test-of-time/668.aspx Removing Cloud Barriers in Europe http://www.infosecurity-magazine.com/blog/2012/10/10/removing-cloud-barriers-in-europe/665.aspx <h5>By David Stott</h5> <p>No one is immune to the ever-changing technology forecast, but one constant (at least for the near future) appears to be global cloud cover. Cloud computing is arguably the most dominant theme on every enterprise&rsquo;s IT list, but in Europe, it&rsquo;s being met with ... Wed, 10 Oct 2012 20:08:46 GMT http://www.infosecurity-magazine.com/blog/2012/10/10/removing-cloud-barriers-in-europe/665.aspx Risking It All http://www.infosecurity-magazine.com/blog/2012/10/9/risking-it-all/662.aspx <p>Ray Bradbury said &ldquo;Living at risk is jumping off the cliff and building your wings on the way down.&rdquo;</p> <p>It&rsquo;s hard to imagine a better analogy for the challenges that information security faces today. Whether we want to or not, the business drive to adopt disruptive technolo ... Tue, 09 Oct 2012 17:21:41 GMT http://www.infosecurity-magazine.com/blog/2012/10/9/risking-it-all/662.aspx Tales of Infosec Embarrassment from the US Presidential Election http://www.infosecurity-magazine.com/blog/2012/10/9/tales-of-infosec-embarrassment-from-the-us-presidential-election/661.aspx <p>What exactly constitutes a data breach? How do we define it? Is it simply when an attacker runs off with thousands of customer details, or does it also include the theft of IP? Perhaps it&rsquo;s any action that leads to the compromise of organizational data, networks, or assets? What about when ... Tue, 09 Oct 2012 11:20:54 GMT http://www.infosecurity-magazine.com/blog/2012/10/9/tales-of-infosec-embarrassment-from-the-us-presidential-election/661.aspx Riding the Consumerization Wave http://www.infosecurity-magazine.com/blog/2012/10/7/riding-the-consumerization-wave/659.aspx <h5>By Cesare Garlati</h5> <p>Rather than resist it, organizations should embrace Consumerization to unlock its business potential. This requires a strategic approach, flexible policies and appropriate security and management tools.</p> <p>The <a href="http://bringyourownit.com/category/consumeriz ... Sun, 07 Oct 2012 01:21:55 GMT http://www.infosecurity-magazine.com/blog/2012/10/7/riding-the-consumerization-wave/659.aspx The Identity Bridge – The Extended Value of Single Sign On http://www.infosecurity-magazine.com/blog/2012/10/1/the-identity-bridge--the-extended-value-of-single-sign-on/658.aspx <p>There is nothing new about single sign on (SSO) systems; they have been on the market for many years as a way to provide a single point of authentication for users before providing them access to IT resources. What is new is the increasing capability of SSO systems to better manage the changing w ... Mon, 01 Oct 2012 14:41:41 GMT http://www.infosecurity-magazine.com/blog/2012/10/1/the-identity-bridge--the-extended-value-of-single-sign-on/658.aspx The Impact of Computing Power on Cryptography http://www.infosecurity-magazine.com/blog/2012/9/21/the-impact-of-computing-power-on-cryptography/653.aspx <h5>By Eric Hay</h5> <p>Advanced technology is a beautiful thing. Not only has it enabled the creation of new, more efficient methods of application delivery and data storage (the Cloud is a prime example), but it&rsquo;s also helped propel the development of more sophisticated solutions for data p ... Fri, 21 Sep 2012 19:27:02 GMT http://www.infosecurity-magazine.com/blog/2012/9/21/the-impact-of-computing-power-on-cryptography/653.aspx Managing Consumer Technology in the Enterprise - Why IT Needs to Change its Mindset http://www.infosecurity-magazine.com/blog/2012/9/19/managing-consumer-technology-in-the-enterprise--why-it-needs-to-change-its-mindset-/652.aspx <h5>By Cesare Garlati</h5> <p>Talking regularly about the <a href="http://bringyourownit.com/">consumerization of IT</a> can often make one sound like a broken record, but the economic, security and management challenges it throws up for enterprises are too important to ignore.</p> <p>The problems ... Wed, 19 Sep 2012 20:45:13 GMT http://www.infosecurity-magazine.com/blog/2012/9/19/managing-consumer-technology-in-the-enterprise--why-it-needs-to-change-its-mindset-/652.aspx A New Starting Point: Re-booting to Help Transition Veterans http://www.infosecurity-magazine.com/blog/2012/9/12/a-new-starting-point-rebooting-to-help-transition-veterans/650.aspx <p>&nbsp;</p> <div><span style="Times New Roman&quot;;Times New Roman&quot;">Going back as far as 2007, the (ISC)</span>&sup2;&nbsp;Government Advisory Board (GAB) along with the ISSA-Northern Virginia Chapter Board, have been attempting to develop partnerships with veterans&rsquo; organizations in ... Wed, 12 Sep 2012 15:56:27 GMT http://www.infosecurity-magazine.com/blog/2012/9/12/a-new-starting-point-rebooting-to-help-transition-veterans/650.aspx 7 Steps to Developing a Cloud Security Plan http://www.infosecurity-magazine.com/blog/2012/9/10/7-steps-to-developing-a-cloud-security-plan/648.aspx <h5>By David Grimes</h5> <p>In IT, the easiest way to stop a new technology or solution from being implemented is to raise a security red flag. As soon as someone mentions concerns around a new IT solution not being &ldquo;secure&rdquo; the project can come to a screeching halt. So as cloud infrast ... Mon, 10 Sep 2012 19:03:43 GMT http://www.infosecurity-magazine.com/blog/2012/9/10/7-steps-to-developing-a-cloud-security-plan/648.aspx Broken WEP WiFi Encryption Still Operational in Large Numbers http://www.infosecurity-magazine.com/blog/2012/9/7/broken-wep-wifi-encryption-still-operational-in-large-numbers/647.aspx <p>&nbsp;</p> <div style="text-align: left;"><span style="">Even after the world has witnessed major Wi-Fi security incidents, such as <a href="http://www.infosecurity-magazine.com/blog/2010/6/25/googles-wifi-snooping-controversy-is-a-wakeup-call-to-stop-wifi-malpractices/178.aspx">Google&rsquo;s W ... Fri, 07 Sep 2012 16:38:07 GMT http://www.infosecurity-magazine.com/blog/2012/9/7/broken-wep-wifi-encryption-still-operational-in-large-numbers/647.aspx Trusting the Oracle: Truth or Dare http://www.infosecurity-magazine.com/blog/2012/8/30/trusting-the-oracle-truth-or-dare/644.aspx <p>&nbsp;</p> <div>It&rsquo;s been claimed that <a href="#http://www.pcworld.com/businesscenter/article/261612/oracle_knew_about_currently_exploited_java_vulnerabilities_for_months_researcher_says.html"><span style="">Oracle has known since April</span></a> about the <a href="http://krebsonsecurity ... Thu, 30 Aug 2012 17:48:42 GMT http://www.infosecurity-magazine.com/blog/2012/8/30/trusting-the-oracle-truth-or-dare/644.aspx Compliance in the Cloud http://www.infosecurity-magazine.com/blog/2012/8/30/compliance-in-the-cloud/642.aspx <div>Earlier in the year Quocirca was asked a surprising question along these lines: &ldquo;If we use a cloud-based storage service and there is a leak of personal data, who is responsible, us or them?&rdquo; Make no mistake, the answer is, that regardless of how and where data is stored, the respon ... Thu, 30 Aug 2012 09:50:41 GMT http://www.infosecurity-magazine.com/blog/2012/8/30/compliance-in-the-cloud/642.aspx Can You Be Sued for Using the Cloud? http://www.infosecurity-magazine.com/blog/2012/8/29/can-you-be-sued-for-using-the-cloud/640.aspx <h5>By Gerry Grealish</h5> <p>We all know that adopting the Cloud comes with some risks &ndash; security, reliability and scalability have, to-date, been the most popular complaints. But now, we can add a new one to the mix: litigation. Case in point, companies doing business in Australia, known fo ... Wed, 29 Aug 2012 20:12:48 GMT http://www.infosecurity-magazine.com/blog/2012/8/29/can-you-be-sued-for-using-the-cloud/640.aspx Is Crypto in the Cloud Enough? http://www.infosecurity-magazine.com/blog/2012/8/27/is-crypto-in-the-cloud-enough-/639.aspx <h3>By Jon-Michael C. Brook</h3> <p>Box.net, DropBox, iCloud, SkyDrive, Amazon Cloud Drive... the list goes on for convenient cloud storage options. Some have had a security incident; the rest will. All implement some form of protection against accidental exposure with varying degrees of protection ... Mon, 27 Aug 2012 21:04:48 GMT http://www.infosecurity-magazine.com/blog/2012/8/27/is-crypto-in-the-cloud-enough-/639.aspx Debunking the Gospel of Security Marketing http://www.infosecurity-magazine.com/blog/2012/8/27/debunking-the-gospel-of-security-marketing/638.aspx <p>Identity and access management are critical for most, if not all organizations &ndash; whether its employee access to enterprise networks, or customers who need access to your products and services. Authentication &ndash; and the credentials that make it possible &ndash; is at the heart of many d ... Mon, 27 Aug 2012 18:04:55 GMT http://www.infosecurity-magazine.com/blog/2012/8/27/debunking-the-gospel-of-security-marketing/638.aspx Your Cloud Provider is a Partner…Not a One-Night Stand http://www.infosecurity-magazine.com/blog/2012/8/21/your-cloud-provider-is-a-partnernot-a-onenight-stand/634.aspx <h5>By Eric Sheridan</h5> <p>&ldquo;We programmatically interface with Cloud Providers to manage our customer data, so we can rely on them for securing our services right?&rdquo; Wrong!</p> <p>The moment you start interfacing with a Cloud Provider you immediately inherit the risks associated with ... Tue, 21 Aug 2012 19:41:17 GMT http://www.infosecurity-magazine.com/blog/2012/8/21/your-cloud-provider-is-a-partnernot-a-onenight-stand/634.aspx Lunch with Cryptography Research http://www.infosecurity-magazine.com/blog/2012/8/21/lunch-with-cryptography-research-/633.aspx <p>On Friday, I had lunch with Ken Warren, marketing director,<a href="http://www.cryptography.com/"> Cryptography Research (CRI). </a></p> <p>There was no topic agenda (just the way I like it) and we had an informal and enjoyable lunch, with conversation dancing around social networking, consumeri ... Tue, 21 Aug 2012 12:52:14 GMT http://www.infosecurity-magazine.com/blog/2012/8/21/lunch-with-cryptography-research-/633.aspx BYOD, Big Data, and My Breakfast with Steve http://www.infosecurity-magazine.com/blog/2012/8/20/byod-big-data-and-my-breakfast-with-steve/632.aspx <p>Our digital world makes frequent communications with colleagues across the globe a seamless occurrence these days. Yet, it&rsquo;s still nice &ndash; and my preferred method &ndash; to meet with people face to face. So when the Information Security Forum&rsquo;s global executive VP, Steve Durbin, ... Mon, 20 Aug 2012 18:09:48 GMT http://www.infosecurity-magazine.com/blog/2012/8/20/byod-big-data-and-my-breakfast-with-steve/632.aspx The Highly Secure Cloud http://www.infosecurity-magazine.com/blog/2012/8/20/the-highly-secure-cloud/631.aspx <p>Surveys by Quocirca and other research firms constantly show that &ldquo;security&rdquo; is THE biggest concern when it comes to making use of cloud services. Why is this, and is the perception that cloud services are inherently less secure than internally managed ones justified?</p> <p>There ar ... Mon, 20 Aug 2012 12:53:32 GMT http://www.infosecurity-magazine.com/blog/2012/8/20/the-highly-secure-cloud/631.aspx Avoiding Storms in the Cloud: The Critical Need for Independent Verification http://www.infosecurity-magazine.com/blog/2012/8/16/avoiding-storms-in-the-cloud-the-critical-need-for-independent-verification/629.aspx <p>By Chris Wysopal</p> <p>Last year, Forrester predicted that <a href="http://www.cloudtweaks.com/2011/04/cloud-computing-market-will-top-241-billion-in-2020/">cloud computing would top $240 billion in 2020</a>. Market Research Media came up with a <a href="http://www.marketresearchmedia.com/?p=83 ... Thu, 16 Aug 2012 20:57:29 GMT http://www.infosecurity-magazine.com/blog/2012/8/16/avoiding-storms-in-the-cloud-the-critical-need-for-independent-verification/629.aspx Big Data, Big Cloud, Big Problem http://www.infosecurity-magazine.com/blog/2012/8/15/big-data-big-cloud-big-problem/625.aspx <h5>By Todd Thiemann</h5> <p>Big Data presents a big opportunity for businesses to mine large volumes of data from a variety of sources to make better and more high-velocity decisions. Since big data implementations are practically always deployed in a cloud environment, be it a private cloud or pu ... Wed, 15 Aug 2012 20:12:03 GMT http://www.infosecurity-magazine.com/blog/2012/8/15/big-data-big-cloud-big-problem/625.aspx Deploying Advanced Cybersecurity Intelligence http://www.infosecurity-magazine.com/blog/2012/8/14/deploying-advanced-cybersecurity-intelligence/623.aspx <p>During a speech in June 2012, Jonathan Evans, the chief of the UK&rsquo;s home security agency MI5, stated that it was &ldquo;<i>fighting 'astonishing' levels of cyber-attacks</i>&rdquo;. The worry is not just about the number, but the sophistication and the degree of targeting of individual peop ... Tue, 14 Aug 2012 14:46:26 GMT http://www.infosecurity-magazine.com/blog/2012/8/14/deploying-advanced-cybersecurity-intelligence/623.aspx Best Practices to Secure the Cloud with Identity Management http://www.infosecurity-magazine.com/blog/2012/8/13/best-practices-to-secure-the-cloud-with-identity-management---------/621.aspx <h5>By Dan Dagnall</h5> <p>What is the &ldquo;cloud identity?&rdquo; The &ldquo;cloud identity&rdquo; begins at the birth of the user&rsquo;s &ldquo;digital identity&rdquo; and includes the attributes to define &ldquo;who you are.&rdquo; &ldquo;Cloud Identity&rdquo; is not a new term to those in th ... Mon, 13 Aug 2012 19:34:18 GMT http://www.infosecurity-magazine.com/blog/2012/8/13/best-practices-to-secure-the-cloud-with-identity-management---------/621.aspx Who Are You, and Who is that Woman? http://www.infosecurity-magazine.com/blog/2012/8/9/who-are-you-and-who-is-that-woman/620.aspx <p>A few weeks ago I found myself in the rather odd position of not being able to prove who I am.&nbsp;At the time I was talking to a company of which I had been a loyal customer for the better part of fifteen years.&nbsp;And they didn&rsquo;t believe me when I said I was me.</p> <p>Unsurprisingly ... Thu, 09 Aug 2012 21:38:42 GMT http://www.infosecurity-magazine.com/blog/2012/8/9/who-are-you-and-who-is-that-woman/620.aspx Application-Aware Firewalls http://www.infosecurity-magazine.com/blog/2012/8/9/applicationaware-firewalls/619.aspx <h5>By Andy Thurai</h5> <p>You may have heard this term recently and wondered what it meant. When it comes to security, everyone thinks of Firewalls, Proxies, IPS, IDS, Honeypots, VPN devices, email security and even Web security, but most people don&rsquo;t think in terms of application level secu ... Thu, 09 Aug 2012 19:34:45 GMT http://www.infosecurity-magazine.com/blog/2012/8/9/applicationaware-firewalls/619.aspx Apple Support and Anti-Social Engineering http://www.infosecurity-magazine.com/blog/2012/8/8/apple-support-and-antisocial-engineering/617.aspx <p>When <a href="http://www.infosecurity-magazine.com/view/27406/tech-journalist-gets-hacked-apple-tech-support-to-blame-"><em><span style="font-size: 10pt"><font color="#800080">Infosecurity</font></span></em><span style="font-size: 10pt"><font color="#800080"> Magazine originally wrote</font></spa ... Wed, 08 Aug 2012 22:28:39 GMT http://www.infosecurity-magazine.com/blog/2012/8/8/apple-support-and-antisocial-engineering/617.aspx Money, money, money... http://www.infosecurity-magazine.com/blog/2012/8/7/money-money-money/614.aspx <p>Venture capital in the Silicon Valley is akin to a heart in the human body. If it fails to contract effectively, and thus normal circulation of the blood/money is deterred, you experience cardiac arrest.</p> <p>I&rsquo;m writing this in a Starbucks in <a href="https://maps.google.co.uk/maps?oe=u ... Tue, 07 Aug 2012 15:29:29 GMT http://www.infosecurity-magazine.com/blog/2012/8/7/money-money-money/614.aspx Black Hat and Silicon Valley 2012: Part One http://www.infosecurity-magazine.com/blog/2012/8/6/black-hat-and-silicon-valley-2012-part-one-/611.aspx <p>I&rsquo;m writing this on the plane back from Las Vegas. People can hang up their <a href="http://www.blackhat.com/">Black Hat </a>t-shirts until next summer (although I suspect many of the delegates wear them year-round. It always amazes me how they are worn with pride like rock t-shirts, with i ... Mon, 06 Aug 2012 13:40:25 GMT http://www.infosecurity-magazine.com/blog/2012/8/6/black-hat-and-silicon-valley-2012-part-one-/611.aspx Consumerization 101 – Employee Privacy vs. Corporate Liability http://www.infosecurity-magazine.com/blog/2012/7/31/consumerization-101--employee-privacy-vs-corporate-liability/609.aspx <h5>By Cesare Garlati</h5> <p>Mary D. joined MD&amp;M Inc. in 2009. Being an Apple enthusiast, she was quite excited to learn that the company offered an innovative BYOD program that allows employees to use their own iPhone for work. As part of the new hire package, Mary signed the acceptable use p ... Tue, 31 Jul 2012 19:30:38 GMT http://www.infosecurity-magazine.com/blog/2012/7/31/consumerization-101--employee-privacy-vs-corporate-liability/609.aspx Pickpockets in the (app) Marketplace http://www.infosecurity-magazine.com/blog/2012/7/20/pickpockets-in-the-app-marketplace/602.aspx <p>Suddenly, it seems, the App Store is having a (very small) taste of the sort of criticism previously reserved for Android outlets, recently with regard to ZonD80&rsquo;s provision of a service by which Apple&rsquo;s in-app purchasing mechanism can be subverted, hard on the heels of reports of a p ... Fri, 20 Jul 2012 12:43:35 GMT http://www.infosecurity-magazine.com/blog/2012/7/20/pickpockets-in-the-app-marketplace/602.aspx Security Considerations When Evaluating Applications on the Google Apps Marketplace http://www.infosecurity-magazine.com/blog/2012/7/19/security-considerations-when-evaluating-applications-on-the-google-apps-marketplace/600.aspx <h5>&nbsp;By Tsahy Shapsa</h5> <p><br /> <img src="/_virtual/ck/a1.JPG" width="211" height="191" align="left" alt="" />Customers care about the security of their data in the cloud, and security of customer data is obviously important to Google, which is why Google has invested in completing numero ... Thu, 19 Jul 2012 21:39:57 GMT http://www.infosecurity-magazine.com/blog/2012/7/19/security-considerations-when-evaluating-applications-on-the-google-apps-marketplace/600.aspx Some Things To Consider When Extending Your IdM Into the Cloud http://www.infosecurity-magazine.com/blog/2012/7/19/some-things-to-consider-when-extending-your-idm-into-the-cloud/599.aspx <h5>By Mark O&rsquo;Neill</h5> <p>Like many organizations, you no doubt face the challenge of extending your IT operations into the cloud to take advantage of the many cloud-based services demanded by your users today. As you make the transition from a firewall-protected in-house IT infrastructure ... Thu, 19 Jul 2012 21:11:37 GMT http://www.infosecurity-magazine.com/blog/2012/7/19/some-things-to-consider-when-extending-your-idm-into-the-cloud/599.aspx Is it Time to License Cyber Security Professionals? http://www.infosecurity-magazine.com/blog/2012/7/9/is-it-time-to-license-cyber-security-professionals/593.aspx <div>At the&nbsp;<a href="http://www.cisse.info/colloquium/">2012&nbsp;Colloquium for Information Systems Security Education&nbsp;(CISSE)</a>&nbsp;last month, a speaker from the US&nbsp;Department of Homeland Security (DHS), National Cyber Security Division, provided a glimpse of a study that was be ... Mon, 09 Jul 2012 23:51:50 GMT http://www.infosecurity-magazine.com/blog/2012/7/9/is-it-time-to-license-cyber-security-professionals/593.aspx Think Beyond the Enterprise: It's Time to Secure the "Edge of the Cloud" http://www.infosecurity-magazine.com/blog/2012/7/9/think-beyond-the-enterprise-its-time-to-secure-the-edge-of-the-cloud/592.aspx <h5>By Ed King</h5> <p>Everyone is familiar with the notion of securing the edge of the enterprise. With the growing adoption of cloud technologies, IT must now also think about securing the &quot;edge of the Cloud&quot;. The edge of the Cloud is the perimeter around any Cloud environment where i ... Mon, 09 Jul 2012 21:13:14 GMT http://www.infosecurity-magazine.com/blog/2012/7/9/think-beyond-the-enterprise-its-time-to-secure-the-edge-of-the-cloud/592.aspx Apple Tiptoes Out of the Pavilion and onto the Sports Field http://www.infosecurity-magazine.com/blog/2012/7/2/apple-tiptoes-out-of-the-pavilion-and-onto-the-sports-field/586.aspx <p>Kelly Jackson Higgins has noted &ldquo;<a href="http://www.darkreading.com/advanced-threats/167901091/security/vulnerabilities/240002945/4-signs-that-apple-s-sharpening-its-security-game.html"><font color="#800080">4 Signs That Apple's Sharpening Its Security Game</font></a>&rdquo;. And indeed, t ... Mon, 02 Jul 2012 12:33:38 GMT http://www.infosecurity-magazine.com/blog/2012/7/2/apple-tiptoes-out-of-the-pavilion-and-onto-the-sports-field/586.aspx Discovering an Old Flame http://www.infosecurity-magazine.com/blog/2012/6/26/discovering-an-old-flame/577.aspx <p>Computer malware programmes only take on a name and a personality after they have been discovered. These are bestowed by the IT security industry, our would-be defenders. Before this, malware is anonymous and unknown, just the way the perpetrators want it.</p> <p>Such was the case with <a href=" ... Tue, 26 Jun 2012 11:38:42 GMT http://www.infosecurity-magazine.com/blog/2012/6/26/discovering-an-old-flame/577.aspx Free Your Data & the Apps Will Follow – But what About Security? http://www.infosecurity-magazine.com/blog/2012/6/22/free-your-data--the-apps-will-follow--but-what-about-security/576.aspx <p>&nbsp;</p> <h5>By Mark O'Neill</h5> <p>Application Programming Interfaces (API) represent such an important technology trend, that new business models are evolving on top of them, and this has led to the term &ldquo;the API economy&rdquo;. The API economy encompasses API developers, the busines ... Fri, 22 Jun 2012 20:41:45 GMT http://www.infosecurity-magazine.com/blog/2012/6/22/free-your-data--the-apps-will-follow--but-what-about-security/576.aspx The Weakest LinkedIn http://www.infosecurity-magazine.com/blog/2012/6/18/the-weakest-linkedin/565.aspx <p>If you missed the news (and I bet you didn&rsquo;t) then here it is &ndash; LinkedIn recently had its very own digital moment of truth, when hackers <a href="http://www.infosecurity-magazine.com/view/26317/linkedin-defends-response-to-password-security-breach-in-face-of-criticism">stole around 6 ... Mon, 18 Jun 2012 15:44:24 GMT http://www.infosecurity-magazine.com/blog/2012/6/18/the-weakest-linkedin/565.aspx Centralized Decision-making Is Essential to Cybersecurity http://www.infosecurity-magazine.com/blog/2012/6/13/centralized-decisionmaking-is-essential-to-cybersecurity/564.aspx <p>American politicians love to bash the Europeans. A common refrain during many campaigns here in the states is &lsquo;my opponent&rsquo;s policies will make us more like Europe&rsquo;, as if the entire continent was a monolithic monster spewing forth a subversive socialist agenda. I would like to ... Wed, 13 Jun 2012 17:57:22 GMT http://www.infosecurity-magazine.com/blog/2012/6/13/centralized-decisionmaking-is-essential-to-cybersecurity/564.aspx An Interview with Centrify CEO, Tom Kemp http://www.infosecurity-magazine.com/blog/2012/6/11/an-interview-with-centrify-ceo-tom-kemp-/562.aspx <p>I get invitations to sit down with industry CEOs all the time. There&rsquo;s no real secret as to why I accept some and not others &ndash; a lot of the time it&rsquo;s just timing. Truth be told, I&rsquo;d like to accept a lot more &ndash; if time was no object.</p> <p>Of the many vendor CEOs I& ... Mon, 11 Jun 2012 18:39:03 GMT http://www.infosecurity-magazine.com/blog/2012/6/11/an-interview-with-centrify-ceo-tom-kemp-/562.aspx Beyond Point Security: Advanced IT Security Intelligence http://www.infosecurity-magazine.com/blog/2012/6/11/beyond-point-security-advanced-it-security-intelligence/560.aspx <p>Point security products such as firewalls, host-based anti-virus and email filtering have a job to do and often do it reasonably well. Arguably if they did not, then businesses would not buy them, although sometimes purchases are made more for compliance purposes than security ones&nbsp;&ndash; f ... Mon, 11 Jun 2012 11:14:11 GMT http://www.infosecurity-magazine.com/blog/2012/6/11/beyond-point-security-advanced-it-security-intelligence/560.aspx Hacktivism: Shades of Gray http://www.infosecurity-magazine.com/blog/2012/6/7/hacktivism-shades-of-gray-/559.aspx <p>Allow me to let you in on a little secret. More often than not, I see the world in black and white. Very rarely do I see shades of gray. I tend to categorize things into boxes according to right, wrong, love, hate, agree, disagree. I am very aware that this isn&rsquo;t necessarily a good quality ... Thu, 07 Jun 2012 11:49:45 GMT http://www.infosecurity-magazine.com/blog/2012/6/7/hacktivism-shades-of-gray-/559.aspx Businesses Are Over-granting Privilege and Failing to Limit Sys-admin Access http://www.infosecurity-magazine.com/blog/2012/6/5/businesses-are-overgranting-privilege-and-failing-to-limit-sysadmin-access/557.aspx <p>System administrators will often need wide ranging access to systems and devices to do their jobs, but systems are not the same as data. Many individuals working in IT departments will in fact be in relatively junior roles. Indeed, they may often be contractors from third parties. Access to confi ... Tue, 05 Jun 2012 08:23:16 GMT http://www.infosecurity-magazine.com/blog/2012/6/5/businesses-are-overgranting-privilege-and-failing-to-limit-sysadmin-access/557.aspx A Report from the IT Security Analyst’s Forum 2012 http://www.infosecurity-magazine.com/blog/2012/5/22/a-report-from-the-it-security-analysts-forum-2012/554.aspx <p>Following hot on from the InfoSec Europe trade show at the start of May 2012 was the IT Security Analyst&rsquo;s forum, organised by Eskenzi PR, brought forward this year to avoid the Olympic events over the summer. As usual, the forum attracted analysts from most of the well-known firms from bot ... Tue, 22 May 2012 07:19:47 GMT http://www.infosecurity-magazine.com/blog/2012/5/22/a-report-from-the-it-security-analysts-forum-2012/554.aspx Organisations Struggle to Safely and Securely Delegate Sys-admin Tasks http://www.infosecurity-magazine.com/blog/2012/5/18/organisations-struggle-to-safely-and-securely-delegate-sysadmin-tasks/553.aspx <p>Many system administrator tasks are a repetitive drudge. Senior IT managers do not want to be doing such tasks on a day-to-day basis and would prefer to delegate these to junior staff or contractors from 3rd parties. However, they need to be confident that such tasks can be safely delegated by li ... Fri, 18 May 2012 09:12:15 GMT http://www.infosecurity-magazine.com/blog/2012/5/18/organisations-struggle-to-safely-and-securely-delegate-sysadmin-tasks/553.aspx Betting on a Breach http://www.infosecurity-magazine.com/blog/2012/5/14/betting-on-a-breach/552.aspx <p>In February of this year, the University of North Carolina-Charlotte issued a statement that a breach had occurred. It now seems to have been a serious one. &nbsp;As of the <a href="http://itservices.uncc.edu/sites/itservices.uncc.edu/files/UNC-Charlotte_Security_Incident_Press_Release_05092012.p ... Mon, 14 May 2012 20:13:38 GMT http://www.infosecurity-magazine.com/blog/2012/5/14/betting-on-a-breach/552.aspx Are Network Perimeters the Berlin Walls of Cloud IAM? http://www.infosecurity-magazine.com/blog/2012/5/14/are-network-perimeters-the-berlin-walls-of-cloud-iam/551.aspx <h5>By Ed King</h5> <p>A single enterprise wide identity and access management (IAM) platform is a noble but unattainable goal. The network perimeter is now a metaphorical &ldquo;Berlin Wall&rdquo; between the two identity platform domains of Cloud and On-Premise. It is time for enterprises to form ... Mon, 14 May 2012 19:36:54 GMT http://www.infosecurity-magazine.com/blog/2012/5/14/are-network-perimeters-the-berlin-walls-of-cloud-iam/551.aspx Quocirca’s Report from Infosecurity Europe 2012 http://www.infosecurity-magazine.com/blog/2012/5/8/quocircas-report-from-infosecurity-europe-2012/548.aspx <p>The end of April was a busy time for IT security analysts. April 24<sup>th</sup> to 26<sup>th</sup> was <a href="http://www.infosec.co.uk/">Infosecurity Europe</a> (InfoSec) at Earl&rsquo;s Court, the biggest such trade show in Europe and the following week was the Eskenzi PR annual IT Security A ... Tue, 08 May 2012 09:20:03 GMT http://www.infosecurity-magazine.com/blog/2012/5/8/quocircas-report-from-infosecurity-europe-2012/548.aspx Apples and Oranges = Apple and Microsoft? http://www.infosecurity-magazine.com/blog/2012/5/2/apples-and-oranges--apple-and-microsoft/546.aspx <p>Several people have asked me for a response to Eugene Kaspersky&rsquo;s views on Apple, <font color="#800080"><a href="http://malware.cbronline.com/news/apple-10-years-behind-microsoft-on-security-kaspersky-250412">as expressed at Infosecurity Europe</a></font>&nbsp;last week, suggesting that App ... Wed, 02 May 2012 14:57:27 GMT http://www.infosecurity-magazine.com/blog/2012/5/2/apples-and-oranges--apple-and-microsoft/546.aspx Outsourcing B2B Integration: The Forgotten Option http://www.infosecurity-magazine.com/blog/2012/5/1/outsourcing-b2b-integration-the-forgotten-option/545.aspx <h5>By Stuart Lisk&nbsp;</h5> <p>Business continuity remains a major concern for enterprises as they move more mission-critical processes to the cloud. Outsourcing B2B integration while ensuring cloud security in order to effectively integrate business processes is challenging at best, and ambiguou ... Tue, 01 May 2012 20:19:36 GMT http://www.infosecurity-magazine.com/blog/2012/5/1/outsourcing-b2b-integration-the-forgotten-option/545.aspx Addressing the Consumerization of IT http://www.infosecurity-magazine.com/blog/2012/4/26/addressing-the-consumerization-of-it/543.aspx <p><em>Bring Your Own Device</em> or <em>Consumerization of IT</em> are fairly hot themes in a lot of customer organizations. When I talk to customers, there are typically different reactions, once we bring this up. Some tell us that it is not part of their strategy; some tell us that they plan to d ... Thu, 26 Apr 2012 18:50:23 GMT http://www.infosecurity-magazine.com/blog/2012/4/26/addressing-the-consumerization-of-it/543.aspx Configuration Compliance in the Cloud http://www.infosecurity-magazine.com/blog/2012/4/25/configuration-compliance-in-the-cloud/542.aspx <h5>By David Meltzer</h5> <p>As a member solution provider in the Cloud Security Alliance, paying careful attention to risk and planning for improvement is second nature for my own companies&rsquo; security services. As a consumer of many start-up cloud services built completely outside the securi ... Wed, 25 Apr 2012 20:05:01 GMT http://www.infosecurity-magazine.com/blog/2012/4/25/configuration-compliance-in-the-cloud/542.aspx Changing Workforce Dynamics: Unleash the Power of the Professional Community http://www.infosecurity-magazine.com/blog/2012/4/19/changing-workforce-dynamics-unleash-the-power-of-the-professional-community/540.aspx <div>By the <a href="https://www.isc2.org/gabewb/Default.aspx">(ISC)&sup2; U.S. Government Advisory Board Executive Writers Bureau (EWB)</a></div> <div>&nbsp;</div> <div>The title of a recent <i>InformationWeek </i>article, <a href="http://www.informationweek.com/news/global-cio/interviews/2326017 ... Thu, 19 Apr 2012 12:11:39 GMT http://www.infosecurity-magazine.com/blog/2012/4/19/changing-workforce-dynamics-unleash-the-power-of-the-professional-community/540.aspx Pining for Failure in the Cloud http://www.infosecurity-magazine.com/blog/2012/4/18/pining-for-failure-in-the-cloud/539.aspx <p>I missed <a href="http://www.cio.com/article/703064/How_Secure_Is_the_Cloud_IT_Pros_Speak_Up">this info-graphic</a> first time around, so thanks to <a href="http://securecloudreview.com/">securecloudreview.com</a>&nbsp;for posting a link. &nbsp;</p> <p>Like all info-graphics, it makes the proces ... Wed, 18 Apr 2012 23:00:04 GMT http://www.infosecurity-magazine.com/blog/2012/4/18/pining-for-failure-in-the-cloud/539.aspx Apple OS X and Risk Reduction http://www.infosecurity-magazine.com/blog/2012/4/16/apple-os-x-and-risk-reduction/538.aspx <p>Some of the confidence Mac users have in the security of their chosen operating system derives from over-reliance on proactive patching. This outbreak highlights the need to be aware that patching of known vulnerabilities in system software or applications is not necessarily prompt enough to fore ... Mon, 16 Apr 2012 13:07:24 GMT http://www.infosecurity-magazine.com/blog/2012/4/16/apple-os-x-and-risk-reduction/538.aspx The Consequences of Failing to Backup Network and Security Devices http://www.infosecurity-magazine.com/blog/2012/4/16/the-consequences-of-failing-to-backup-network-and-security-devices/537.aspx <p>Most IT users will have suffered the frustration of losing work because their access device (PC, tablet, smartphone etc.) fails and has not been backed up, or indeed they may have deleted a file accidentally. This is inconvenient for the individual and those associated with the project they are w ... Mon, 16 Apr 2012 09:41:16 GMT http://www.infosecurity-magazine.com/blog/2012/4/16/the-consequences-of-failing-to-backup-network-and-security-devices/537.aspx Cloud Security Requires All Hands on Deck http://www.infosecurity-magazine.com/blog/2012/4/13/cloud-security-requires-all-hands-on-deck-/536.aspx <h5>By Andrew Wild</h5> <p>It&rsquo;s clear there are many compelling reasons, both financial and productivity-related, for enterprises to move IT functionality into the cloud, so it&rsquo;s not surprising that they&rsquo;re moving quickly to adopt popular collaboration services like Box.net, Yamme ... Fri, 13 Apr 2012 16:11:21 GMT http://www.infosecurity-magazine.com/blog/2012/4/13/cloud-security-requires-all-hands-on-deck-/536.aspx Flashbacks and Backtracks http://www.infosecurity-magazine.com/blog/2012/4/6/flashbacks-and-backtracks/535.aspx <p><span style="font-family: 'Calibri','sans-serif'; font-size: 11pt">If you follow my <a href="http://macviruscom.wordpress.com/"><span style="color: purple">Mac Virus blog</span></a>, you&rsquo;ll have noticed that I&rsquo;ve been tracking some of the coverage of Mac malware incidents to hit my ra ... Fri, 06 Apr 2012 11:15:44 GMT http://www.infosecurity-magazine.com/blog/2012/4/6/flashbacks-and-backtracks/535.aspx Hacktivists Fail to Uphold a Proud Tradition of Protest http://www.infosecurity-magazine.com/blog/2012/4/3/hacktivists-fail-to-uphold-a-proud-tradition-of-protest/534.aspx <p>A&nbsp;recent law enforcement sting corralled 25 alleged members of the Anonymous hacktivist group. As it turns out, the information fed to the FBI and other participating agencies came from within: Hector Xavier Monsegur (aka, &lsquo;Sabu&rsquo;) leader of the Anonymous offshoot LulzSec, had app ... Tue, 03 Apr 2012 19:34:47 GMT http://www.infosecurity-magazine.com/blog/2012/4/3/hacktivists-fail-to-uphold-a-proud-tradition-of-protest/534.aspx Windows Desktop Admin Rights – An Open Door for Malware? http://www.infosecurity-magazine.com/blog/2012/4/3/windows-desktop-admin-rights--an-open-door-for-malware/533.aspx <p>Quocirca has written extensively about privileged user management over the years, including two research reports <a href="http://www.osirium.com/alpha-files/wp">Conquering the sys-admin challenge</a> in 2011 and <a href="http://www.quocirca.com/reports/430/privileged-user-management--its-time-to- ... Tue, 03 Apr 2012 18:09:34 GMT http://www.infosecurity-magazine.com/blog/2012/4/3/windows-desktop-admin-rights--an-open-door-for-malware/533.aspx OS X Malware: A Steady Trickle http://www.infosecurity-magazine.com/blog/2012/3/26/os-x-malware-a-steady-trickle/529.aspx <p><span style="color: #1f497d">I&rsquo;m guessing that the myth of OS X invulnerability to malware is pretty much busted by now: at any rate, there has been wave after wave of OS X-related malware reports in the past week or two. <a href="http://nakedsecurity.sophos.com/2012/03/20/topless-supermode ... Mon, 26 Mar 2012 13:52:55 GMT http://www.infosecurity-magazine.com/blog/2012/3/26/os-x-malware-a-steady-trickle/529.aspx Secure Cloud – Myth or Reality? http://www.infosecurity-magazine.com/blog/2012/3/19/secure-cloud--myth-or-reality/528.aspx <h5>By Chris Hinkley</h5> <p>Cloud Security is not a myth. It can be achieved. The biggest hindrance on debunking this myth is for enterprise businesses to begin thinking about the Cloud differently. It is not the equipment of co-location dedicated servers, or on-premises technology, as it is chang ... Mon, 19 Mar 2012 17:36:33 GMT http://www.infosecurity-magazine.com/blog/2012/3/19/secure-cloud--myth-or-reality/528.aspx State and Local Governments Saying ‘Bye-bye’ to CISOs? http://www.infosecurity-magazine.com/blog/2012/3/17/state-and-local-governments-saying-byebye-to-cisos/527.aspx <h5>By the <a href="https://www.isc2.org/gabewb/Default.aspx">(ISC)&sup2; U.S. Government Advisory Board Executive Writers Bureau</a> (EWB)</h5> <p>At a recent <a href="http://www.governing.com/events/Outlook-in-the-States--Localities-Conference-2012.html?p=agenda">GOVERNING</a> Conference in DC, s ... Sat, 17 Mar 2012 12:57:36 GMT http://www.infosecurity-magazine.com/blog/2012/3/17/state-and-local-governments-saying-byebye-to-cisos/527.aspx OSX/Imuler: the Image-Conscious Trojan http://www.infosecurity-magazine.com/blog/2012/3/16/osximuler-the-imageconscious-trojan/526.aspx <p>Intego recently posted some <a href="http://blog.intego.com/new-version-of-imuler-trojan-horse-masquerades-as-image-files/">information on its blog</a> concerning the Imuler information-stealing Trojan. The variant that Intego calls OSX/Imuler.C uses a different stealth/social engineering techniq ... Fri, 16 Mar 2012 17:08:12 GMT http://www.infosecurity-magazine.com/blog/2012/3/16/osximuler-the-imageconscious-trojan/526.aspx Reducing the Number of Sys-admin Errors http://www.infosecurity-magazine.com/blog/2012/3/14/reducing-the-number-of-sysadmin-errors/525.aspx <p>In recent <a href="http://www.osirium.com/alpha-files/wp">Quocirca research</a>, businesses report that on average their system administrators (sys-admins) make errors carrying out about 6% of tasks. This might not sound like much, but actually it adds up to quite a big number.</p> <div style="m ... Wed, 14 Mar 2012 08:42:41 GMT http://www.infosecurity-magazine.com/blog/2012/3/14/reducing-the-number-of-sysadmin-errors/525.aspx Pennsylvania Voter ID Law: A Solution Without a Problem http://www.infosecurity-magazine.com/blog/2012/3/14/pennsylvania-voter-id-law-a-solution-without-a-problem/524.aspx <p>I was driving home today from a conference on online copyright enforcement, and in case you missed our frenzy of Tweets ( <a href="https://twitter.com/#!/InfosecurityMag">#copyrightcitp</a>) live from the event, I promise to write more about it in our upcoming news feature on anti-piracy legislat ... Wed, 14 Mar 2012 00:39:55 GMT http://www.infosecurity-magazine.com/blog/2012/3/14/pennsylvania-voter-id-law-a-solution-without-a-problem/524.aspx Security Professionals Do Use AV: Even On Macs… http://www.infosecurity-magazine.com/blog/2012/3/12/security-professionals-do-use-av-even-on-macs/522.aspx <p>I&rsquo;m slightly surprised to realize it&rsquo;s almost exactly a month since I blogged here, but I was travelling for a lot of that time (a slightly confusing mixture of work and vacation). Still, I&rsquo;m pleased to see that an email conversation I had with Esther Shein about OS X, security, ... Mon, 12 Mar 2012 22:20:19 GMT http://www.infosecurity-magazine.com/blog/2012/3/12/security-professionals-do-use-av-even-on-macs/522.aspx Seeing Through the Clouds: Gaining Confidence when Physical Access to Your Data Is Removed http://www.infosecurity-magazine.com/blog/2012/3/12/seeing-through-the-clouds-gaining-confidence-when-physical-access-to-your-data-is-removed/520.aspx <h5>By David Lingenfelter</h5> <p>Cloud computing brings with it new opportunities, new frontiers, new challenges, and new chances for loss of intellectual property. From hosting simple websites, to entire development environments, companies have been experimenting with cloud-based services for so ... Mon, 12 Mar 2012 19:44:31 GMT http://www.infosecurity-magazine.com/blog/2012/3/12/seeing-through-the-clouds-gaining-confidence-when-physical-access-to-your-data-is-removed/520.aspx Lock Box: Where Should You Store Cloud Encryption Keys? http://www.infosecurity-magazine.com/blog/2012/3/12/lock-box-where-should-you-store-cloud-encryption-keys/519.aspx <h5>By Todd Thiemann</h5> <p>Whether driven by regulatory compliance or corporate mandates, sensitive data in the cloud needs protection along with access control. This usually involves encrypting data in transit as well as data at rest in some way, shape or form, and then managing the encryption k ... Mon, 12 Mar 2012 19:07:06 GMT http://www.infosecurity-magazine.com/blog/2012/3/12/lock-box-where-should-you-store-cloud-encryption-keys/519.aspx Organisations Failing to Close-off the Risks of Legacy Privileged Accounts http://www.infosecurity-magazine.com/blog/2012/3/7/organisations-failing-to-closeoff-the-risks-of-legacy-privileged-accounts/516.aspx <p>If you are trying to compromise an organisation&rsquo;s IT systems in some way, then you need to have access. Getting a given user&rsquo;s log in details is a starting point but might not get you that far, unless they are a user with privilege. Privileged users have much wider ranging access than ... Wed, 07 Mar 2012 12:41:57 GMT http://www.infosecurity-magazine.com/blog/2012/3/7/organisations-failing-to-closeoff-the-risks-of-legacy-privileged-accounts/516.aspx Facing Up to the Application Security Challenge http://www.infosecurity-magazine.com/blog/2012/3/2/facing-up-to-the-application-security-challenge/514.aspx <div style="margin-bottom: 0.0001pt;">A new Quocirca report underlines the scale of the application security challenge faced by businesses. The average enterprise tracks around 500 mission critical applications, in financial services organisations it is closer to 800. The security challenge arises b ... Fri, 02 Mar 2012 12:49:25 GMT http://www.infosecurity-magazine.com/blog/2012/3/2/facing-up-to-the-application-security-challenge/514.aspx Deprovisioning in the Cloud http://www.infosecurity-magazine.com/blog/2012/2/23/deprovisioning-in-the-cloud/511.aspx <h5>By Jon-Michael C. Brook</h5> <p>Let's be honest: how many of you have tried logging in to one of your former employer&rsquo;s accounts? Maybe you had a CRM solution and you wanted to get the name of that guy who suggested he had the next hot idea. You didn't set your out-of-office message wit ... Thu, 23 Feb 2012 20:20:34 GMT http://www.infosecurity-magazine.com/blog/2012/2/23/deprovisioning-in-the-cloud/511.aspx Horror from Beyond the Cloud (with caffeine) http://www.infosecurity-magazine.com/blog/2012/2/23/horror-from-beyond-the-cloud-with-caffeine/510.aspx <p>Let me tell you what the work of a reclusive horror writer and a morning cup of coffee can teach us about attitudes toward cloud computing.</p> <p>The horror writer is <a href="http://en.wikipedia.org/wiki/HPLovecraft">Howard Phillips Lovecraft</a> (known by his initials &ldquo;H.P.&rdquo;). In ... Thu, 23 Feb 2012 15:40:20 GMT http://www.infosecurity-magazine.com/blog/2012/2/23/horror-from-beyond-the-cloud-with-caffeine/510.aspx Xerox and McAfee: A joint force to integrate security into the print world http://www.infosecurity-magazine.com/blog/2012/2/17/xerox-and-mcafee-a-joint-force-to-integrate-security-into-the-print-world/508.aspx <p>This blog post was written by Quocirca's print speciailst, Louella Ferandes</p> <p><span style="text-align: justify; ">Despite a continued reliance on printing, many businesses overlook print security in their overall approach to data protection. This may be set to change with the recent announc ... Fri, 17 Feb 2012 10:48:15 GMT http://www.infosecurity-magazine.com/blog/2012/2/17/xerox-and-mcafee-a-joint-force-to-integrate-security-into-the-print-world/508.aspx Safe Authentication for Remote Sys-Admin Tasks http://www.infosecurity-magazine.com/blog/2012/2/15/safe-authentication-for-remote-sysadmin-tasks/506.aspx <p>Not all systems administration (sys-admin) is done by people. Some applications need administrator access to communicate and make changes. Furthermore, remote management tasks are often carried out using pre-set procedures in sys-admin tools, for example the backup of branch office devices.</p> ... Wed, 15 Feb 2012 15:56:24 GMT http://www.infosecurity-magazine.com/blog/2012/2/15/safe-authentication-for-remote-sysadmin-tasks/506.aspx Malware: a Matter of Definition http://www.infosecurity-magazine.com/blog/2012/2/13/malware-a-matter-of-definition/505.aspx <p>Kurt Wismer has just put up a blog asking <a href="http://anti-virus-rants.blogspot.com/2012/02/is-iphone-really-malware-free.html"><font color="#800080">is the iphone really malware free?</font></a> (Don&rsquo;t be put off by the trademark absence of capitalization). Wismer is not illiterate and ... Mon, 13 Feb 2012 18:33:58 GMT http://www.infosecurity-magazine.com/blog/2012/2/13/malware-a-matter-of-definition/505.aspx Opportunity Knocks Once… http://www.infosecurity-magazine.com/blog/2012/2/10/opportunity-knocks-once/504.aspx <h5>By Henry St. Andre</h5> <p>In 1983, I was a young electrical engineering student, when I took a job working for a small long distance company in Phoenix, Arizona. For me, Opportunity had Knocked and I had just opened the door on an amazing future. In the world of communications, things were a ... Fri, 10 Feb 2012 20:00:47 GMT http://www.infosecurity-magazine.com/blog/2012/2/10/opportunity-knocks-once/504.aspx What Can a Hacker Do with Stolen WiFi Credentials? http://www.infosecurity-magazine.com/blog/2012/2/3/what-can-a-hacker-do-with-stolen-wifi-credentials/502.aspx <p>&nbsp;</p> <div style="text-align: left;"><span style="Palatino Linotype&quot;,&quot;serif&quot;">Recently HTC acknowledged a vulnerability that can expose a user&rsquo;s WiFi credentials, including the WiFi SSID and security passwords to a malicious app running on some of its Android phones. Th ... Fri, 03 Feb 2012 14:19:42 GMT http://www.infosecurity-magazine.com/blog/2012/2/3/what-can-a-hacker-do-with-stolen-wifi-credentials/502.aspx Facebook Goes Public – Time to Pop the Privacy Champagne? http://www.infosecurity-magazine.com/blog/2012/2/2/facebook-goes-public--time-to-pop-the-privacy-champagne-/501.aspx <p>First, please excuse me for letting my inner Archie Bunker vent a little. If you are anything like me, then you could care less about updating your Facebook page on an hourly basis. Sure, I have a page, but maintaining it is both a bore and a chore (pardon my weak rhyming scheme). What are even w ... Thu, 02 Feb 2012 19:46:15 GMT http://www.infosecurity-magazine.com/blog/2012/2/2/facebook-goes-public--time-to-pop-the-privacy-champagne-/501.aspx Trustworthy Computing: Looking Back to Look Forward http://www.infosecurity-magazine.com/blog/2012/2/1/trustworthy-computing-looking-back-to-look-forward/499.aspx <p>Anniversaries are often a time to reflect on the past but also to look to the future. A major anniversary in the field of computer security was reached on the 15th of January this year. That date marked the 10th anniversary of Bill Gates' famous memo marking the start of Microsoft's <a href="http ... Wed, 01 Feb 2012 17:14:40 GMT http://www.infosecurity-magazine.com/blog/2012/2/1/trustworthy-computing-looking-back-to-look-forward/499.aspx iOS Jailbreaking: Does Absinthe Make the Heart Grow Fonder? http://www.infosecurity-magazine.com/blog/2012/1/23/ios-jailbreaking-does-absinthe-make-the-heart-grow-fonder/496.aspx <p>Kevin Townsend asked me for my opinion on iGadget jailbreaking, in the light of the recent release of Absinthe, a jailbreaking tool for the iPhone 4s and iPad 2. As a result, I&rsquo;m quoted in a <a href="http://www.infosecurity-magazine.com/view/23391/jailbreak-for-iphone-4s-released/">useful a ... Mon, 23 Jan 2012 19:22:16 GMT http://www.infosecurity-magazine.com/blog/2012/1/23/ios-jailbreaking-does-absinthe-make-the-heart-grow-fonder/496.aspx I Keep Getting Flashbacks http://www.infosecurity-magazine.com/blog/2012/1/16/i-keep-getting-flashbacks/492.aspx <p>2012 was looking quite quiet in Apple security terms up to now, but I see that the guys behind the <a href="http://blog.eset.com/2011/09/27/new-apple-os-x-malware-fake-adobe-flash-installer"><font color="#800080">OSX/Flashback Trojan</font></a> are quietly beavering away. No sooner had &nbsp;Appl ... Mon, 16 Jan 2012 17:19:52 GMT http://www.infosecurity-magazine.com/blog/2012/1/16/i-keep-getting-flashbacks/492.aspx 10 Years of Trustworthy Computing at Microsoft http://www.infosecurity-magazine.com/blog/2012/1/12/10-years-of-trustworthy-computing-at-microsoft/490.aspx <p><a href="http://aka.ms/twcnext"><img width="148" vspace="5" height="148" border="0" src="http://blogs.technet.com/cfs-filesystemfile.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-50-43-twcnext/1488.TwC_2D00_Tile_5F00_148x148_2D00_wShadow.png" alt="TwC Next" style="margin: 0px 1 ... Thu, 12 Jan 2012 19:58:22 GMT http://www.infosecurity-magazine.com/blog/2012/1/12/10-years-of-trustworthy-computing-at-microsoft/490.aspx Casablanca in the Cloud http://www.infosecurity-magazine.com/blog/2012/1/11/casablanca-in-the-cloud/489.aspx <p>I thought <a href="http://searchcloudcomputing.techtarget.com/news/2240102241/To-cloud-skeptics-Dont-diss-Dropbox">this piece</a>&nbsp;by Jo Maitland over at SearchCloudComputing.com was interesting, because it so closely reflects the experiences of a large number of businesses faced with the spe ... Wed, 11 Jan 2012 19:41:12 GMT http://www.infosecurity-magazine.com/blog/2012/1/11/casablanca-in-the-cloud/489.aspx Implications of Wi-Fi Protected Setup Vulnerability http://www.infosecurity-magazine.com/blog/2012/1/9/implications-of-wifi-protected-setup-vulnerability-/488.aspx <p><span style="Palatino Linotype&quot;,&quot;serif&quot;"><a href="http://www.infosecurity-magazine.com/blog/2011/12/29/enabling-wps-can-make-you-vulnerable/486.aspx">After mentioning briefly</a> about the recently discovered Wi-Fi Protected Setup (WPS) vulnerability due to certain design flaws in ... Mon, 09 Jan 2012 14:38:39 GMT http://www.infosecurity-magazine.com/blog/2012/1/9/implications-of-wifi-protected-setup-vulnerability-/488.aspx Enabling WPS Can Make You Vulnerable http://www.infosecurity-magazine.com/blog/2011/12/29/enabling-wps-can-make-you-vulnerable/486.aspx <p><span style="">Adding to the users convenience, Wi-Fi is increasingly becoming a default capability of many consumer devices, including smartphones, printers, cameras, TVs, etc. to wirelessly share contents, access Internet or connect to a particular network. &nbsp;</span></p> <div style="text-a ... Thu, 29 Dec 2011 16:29:37 GMT http://www.infosecurity-magazine.com/blog/2011/12/29/enabling-wps-can-make-you-vulnerable/486.aspx 10 Reasons to Migrate Off Windows XP http://www.infosecurity-magazine.com/blog/2011/12/22/10-reasons-to-migrate-off-windows-xp/483.aspx <p>I would like you to sit back, close your eyes and think about the year 2001. Think about how you used technology back then, how you used the Internet. Now, let&rsquo;s take it a little bit further back in history and think of the year 2000. Just after we realized that the Year-2000-Problem was ha ... Thu, 22 Dec 2011 10:48:37 GMT http://www.infosecurity-magazine.com/blog/2011/12/22/10-reasons-to-migrate-off-windows-xp/483.aspx Looking Into The Cloud http://www.infosecurity-magazine.com/blog/2011/12/21/looking-into-the-cloud/482.aspx <p>As we roll up to the end of the year it's usually time to start making predictions about what will happen next year. But since Drew and the team already did a <a href="http://www.infosecurity-magazine.com/view/22567/2012-threat-predictions-an-industry-roundup/">great job of that</a>&nbsp;I'll ins ... Wed, 21 Dec 2011 21:20:32 GMT http://www.infosecurity-magazine.com/blog/2011/12/21/looking-into-the-cloud/482.aspx Holiday Prediction Presents: Mind Your Website’s Navigation Layer http://www.infosecurity-magazine.com/blog/2011/12/19/holiday-prediction-presents-mind-your-websites-navigation-layer/480.aspx <p>From time to time, I try to share some of our reader feedback via this blog, whether it is positive or negative. As each year draws to a close, our editorial inbox gets bombarded with threat predictions of all kinds for the upcoming year. Some are company-wide predictions, others come from indivi ... Mon, 19 Dec 2011 17:04:20 GMT http://www.infosecurity-magazine.com/blog/2011/12/19/holiday-prediction-presents-mind-your-websites-navigation-layer/480.aspx Small Eruption in Peru*: Not Many Infected http://www.infosecurity-magazine.com/blog/2011/12/19/small-eruption-in-peru-not-many-infected/479.aspx <p>[This is probably my last article here for 2011. Compliments of the season to you all.]</p> <p>Inevitably, my attention was drawn last week to an article on Mich Kabay&rsquo;s <a href="http://infosecreviews.com/perception/"><font color="#800080">Infosec Perception</font></a> based on an essay by ... Mon, 19 Dec 2011 13:23:23 GMT http://www.infosecurity-magazine.com/blog/2011/12/19/small-eruption-in-peru-not-many-infected/479.aspx Moving on Up http://www.infosecurity-magazine.com/blog/2011/12/19/moving-on-up---/478.aspx <p><strong>Within industry circles, 2011 has become known as the year of the hack, or the year of the black hat if you prefer. </strong></p> <p>Game-changing malware has exploded, proving that the critical national infrastructure is under threat and that cyber war and cyber espionage are very daunt ... Mon, 19 Dec 2011 11:31:05 GMT http://www.infosecurity-magazine.com/blog/2011/12/19/moving-on-up---/478.aspx Should Cybersecurity be Treated as a Profession? Your Opinion Counts http://www.infosecurity-magazine.com/blog/2011/12/16/should-cybersecurity-be-treated-as-a-profession-your-opinion-counts/477.aspx <h5>By the <a href="https://www.isc2.org/gabewb/Default.aspx">(ISC)&sup2; U.S. Government Advisory Board Executive Writers Bureau</a> (EWB)</h5> <p>It takes many, many years for a business area of focus to emerge as a recognized profession. Certainly, cybersecurity is moving in that direction. How ... Fri, 16 Dec 2011 14:45:29 GMT http://www.infosecurity-magazine.com/blog/2011/12/16/should-cybersecurity-be-treated-as-a-profession-your-opinion-counts/477.aspx Giving Thanks to the Infosec Professionals http://www.infosecurity-magazine.com/blog/2011/12/14/giving-thanks-to-the-infosec-professionals-/476.aspx <p>In what may qualify as a profound understatement, the past year has been challenging for security professionals across the globe. </p> <p>Much of what infosec professionals do goes unnoticed, except when things go wrong. And 2011 has had no shortage of these black-eye events. Allow me, however, ... Wed, 14 Dec 2011 19:36:35 GMT http://www.infosecurity-magazine.com/blog/2011/12/14/giving-thanks-to-the-infosec-professionals-/476.aspx Software Insecurity Thrives http://www.infosecurity-magazine.com/blog/2011/12/14/software-insecurity-thrives/474.aspx <p>&nbsp;</p> <p>The fourth half-yearly <a href="http://www.infosecurity-magazine.com/view/22518/more-than-8-in-10-software-applications-fail-security-test-says-veracode/">State of Software Security Report</a> from cloud-based application security tester Veracode makes for painful reading. Based on ... Wed, 14 Dec 2011 13:02:40 GMT http://www.infosecurity-magazine.com/blog/2011/12/14/software-insecurity-thrives/474.aspx Secure Disposal of Old IT Equipment http://www.infosecurity-magazine.com/blog/2011/12/14/secure-disposal-of-old-it-equipment/473.aspx <p>Network and security devices age just like any other IT equipment. As the IT industry moves toward 100 gigabit/second Ethernet and 100 megabit/second broadband connections, many existing devices will no longer cope with traffic volumes. The need to replace routers, firewalls, load-balancers, cont ... Wed, 14 Dec 2011 08:26:33 GMT http://www.infosecurity-magazine.com/blog/2011/12/14/secure-disposal-of-old-it-equipment/473.aspx Implementing the Top 4 Defense Strategies http://www.infosecurity-magazine.com/blog/2011/12/13/implementing-the-top-4-defense-strategies/472.aspx <p>The Australian Defense Signals Directorate maintains a list of the <a target="_blank" href="http://www.dsd.gov.au/infosec/top35mitigationstrategies.htm"><strong><font color="#365da0">Top 35 Mitigation Strategies</font></strong></a> against targeted intrusions. This is just a reference to the top ... Tue, 13 Dec 2011 13:57:06 GMT http://www.infosecurity-magazine.com/blog/2011/12/13/implementing-the-top-4-defense-strategies/472.aspx Who Needs Hackers? http://www.infosecurity-magazine.com/blog/2011/12/12/who-needs-hackers/471.aspx <p>&nbsp;</p> <div>As a rule I don't comment on unproven allegations, but this time I'm breaking my rule. According to a District of New Hampshire indictment (<a href="http://www.wired.com/images_blogs/threatlevel/2011/12/Indictment_Romanian-POS-Hackers.pdf">downloadable from Wired</a>), four Roman ... Mon, 12 Dec 2011 13:53:28 GMT http://www.infosecurity-magazine.com/blog/2011/12/12/who-needs-hackers/471.aspx Carrier IQ: Not Just an Android Issue http://www.infosecurity-magazine.com/blog/2011/12/1/carrier-iq-not-just-an-android-issue/469.aspx <p>Unless you&rsquo;re currently trekking through the Gobi, you&rsquo;ve probably caught some of the fuss about Carrier IQ, accused of conduct resembling a rootkit more than legitimate logging. I think that some of the indignation has been a little overdone, as I commented <a href="http://www.eweeke ... Thu, 01 Dec 2011 19:48:22 GMT http://www.infosecurity-magazine.com/blog/2011/12/1/carrier-iq-not-just-an-android-issue/469.aspx Personal Data Exodus http://www.infosecurity-magazine.com/blog/2011/12/1/personal-data-exodus/468.aspx <p>I came across a couple of interesting stories this week, both of which are worth passing along.This first is from <a href="http://www.geek.com/articles/mobile/security-researcher-responds-to-carrieriq-with-video-proof-20111129/">geek.com</a>&nbsp;and is the latest in an <a href="http://www.geek.c ... Thu, 01 Dec 2011 15:55:18 GMT http://www.infosecurity-magazine.com/blog/2011/12/1/personal-data-exodus/468.aspx A critical software problem for banks http://www.infosecurity-magazine.com/blog/2011/12/1/-a-critical-software-problem-for-banks/467.aspx <div style="margin-bottom: 0.0001pt;">New Quocirca research (sponsored by on-demand software code security specialist, Veracode) underlines a problem faced by financial services organisations when it comes to security and compliance; they track getting on for twice as many critical software applicat ... Thu, 01 Dec 2011 10:35:43 GMT http://www.infosecurity-magazine.com/blog/2011/12/1/-a-critical-software-problem-for-banks/467.aspx Cloud Security: An Oxymoron? http://www.infosecurity-magazine.com/blog/2011/11/29/cloud-security--an-oxymoron/465.aspx <h5>By Torsten George</h5> <p>Cloud computing represents today's big innovation trend in the information technology (IT) space. Because it allows organizations to deploy quickly, move swiftly, and share resources, cloud computing is rapidly replacing conventional in-house facilities at organization ... Tue, 29 Nov 2011 19:21:18 GMT http://www.infosecurity-magazine.com/blog/2011/11/29/cloud-security--an-oxymoron/465.aspx The UK Cyber Security Strategy – is this really progress? http://www.infosecurity-magazine.com/blog/2011/11/29/the-uk-cyber-security-strategy--is-this-really-progress/464.aspx <p>&nbsp;</p> <div>A <a href="http://www.cabinetoffice.gov.uk/sites/default/files/resources/The%20UK%20Cyber%20Security%20Strategy-%20web%20ver.pdf">UK Cyber Security Strategy</a> has just been released by the Cabinet Office. The first thing I noted was that seven of its 43 pages are have a solid c ... Tue, 29 Nov 2011 12:28:50 GMT http://www.infosecurity-magazine.com/blog/2011/11/29/the-uk-cyber-security-strategy--is-this-really-progress/464.aspx Council of Europe Octopus Conference- Some Thoughts http://www.infosecurity-magazine.com/blog/2011/11/23/council-of-europe-octopus-conference-some-thoughts/462.aspx <p>l am still sitting in the parliament room of the <a href="http://www.coe.int/t/DGHL/cooperation/economiccrime/cybercrime/cy_Octopus_Interface_2011/Interface2011_en.asp">Council of Europe at the celebration event for the Budapest Convention</a>. It was another very good event advancing the challen ... Wed, 23 Nov 2011 11:38:16 GMT http://www.infosecurity-magazine.com/blog/2011/11/23/council-of-europe-octopus-conference-some-thoughts/462.aspx Google’s Approach of a “_NOMAP” Wi-Fi ZONE http://www.infosecurity-magazine.com/blog/2011/11/20/googles-approach-of-a-nomap-wifi-zone/460.aspx <p><span style=""><a href="http://googleblog.blogspot.com/2011/11/greater-choice-for-wireless-access.html">Google recently announced an approach</a> to provide Wi-Fi Access Point owners an option to opt-out from the Google Location server, thereby addressing specific privacy concerns of certain Acce ... Sun, 20 Nov 2011 11:07:15 GMT http://www.infosecurity-magazine.com/blog/2011/11/20/googles-approach-of-a-nomap-wifi-zone/460.aspx iPaddling in Corporate Waters http://www.infosecurity-magazine.com/blog/2011/11/18/ipaddling-in-corporate-waters/459.aspx <p><em>Computer Weekly</em>, in an article I mentioned in my previous blog here, notes that Tablet device ownership among mobile employees increased from 33% in the second quarter of 2011 to 44%.That statistic dovetails quite neatly with a study from ComScore on<span style="color: #1f497d"> <a href= ... Fri, 18 Nov 2011 11:35:12 GMT http://www.infosecurity-magazine.com/blog/2011/11/18/ipaddling-in-corporate-waters/459.aspx Goodbye Blackberry Way?* http://www.infosecurity-magazine.com/blog/2011/11/18/goodbye-blackberry-way/458.aspx <p><a href="http://www.computerweekly.com/news/2240111024/Blackberry-grip-on-enterprise-snatched-by-Apple-iPhone">iPass tells us</a>&nbsp;that a recent survey (n = 2,300) indicated that the iPhone now has 45% marketshare in the enterprise, whereas use of the Blackberry is down (slightly) to 35%. Whi ... Fri, 18 Nov 2011 10:50:10 GMT http://www.infosecurity-magazine.com/blog/2011/11/18/goodbye-blackberry-way/458.aspx Cyber War Will Not Take Place http://www.infosecurity-magazine.com/blog/2011/11/17/cyber-war-will-not-take-place/457.aspx <p>I have to admit &ndash; it is not my title but it caught my attention. Over the course of the last few years, the term &ldquo;Cyberwar&rdquo; came up all over the place. I was recently reading a book on it, where there was a chapter called &ldquo;Definition of Cyberwar&rdquo; and I thought that f ... Thu, 17 Nov 2011 10:39:18 GMT http://www.infosecurity-magazine.com/blog/2011/11/17/cyber-war-will-not-take-place/457.aspx Auditors want to know about individuals, not groups http://www.infosecurity-magazine.com/blog/2011/11/16/auditors-want-to-know-about-individuals-not-groups/456.aspx <p>&nbsp;It is pretty obvious that to audit the use of IT resources and applications you need to know who is doing what. This is especially true when it comes to system administrators (sys-admins) who are operating with increased levels of privilege.</p> <div style="margin-bottom: 0.0001pt;">&nbsp; ... Wed, 16 Nov 2011 11:24:35 GMT http://www.infosecurity-magazine.com/blog/2011/11/16/auditors-want-to-know-about-individuals-not-groups/456.aspx Cloud Security Considerations – a different view http://www.infosecurity-magazine.com/blog/2011/11/16/cloud-security-considerations--a-different-view/455.aspx <p>&nbsp;</p> <div>Yesterday, looking at my RSS-Feed I saw the post in here called <a href="http://www.infosecurity-magazine.com/blog/2011/11/14/cloud-security-considerations/452.aspx">Cloud Security Considerations</a> &ndash; and immediately wanted to read it as we (a friend of mine and me) wrote ... Wed, 16 Nov 2011 11:07:33 GMT http://www.infosecurity-magazine.com/blog/2011/11/16/cloud-security-considerations--a-different-view/455.aspx Cyberespionage: The Chinese State of Denial http://www.infosecurity-magazine.com/blog/2011/11/16/cyberespionage-the-chinese-state-of-denial/453.aspx <p>Today I spoke with Roger Cressey, a cybersecurity and counterterrorism expert for both the Clinton and Bush administrations, and now a senior VP with Booz Allen Hamilton. I asked him if he was equally amused by the Chinese government&rsquo;s continuous denials that hackers within its borders acti ... Wed, 16 Nov 2011 01:28:03 GMT http://www.infosecurity-magazine.com/blog/2011/11/16/cyberespionage-the-chinese-state-of-denial/453.aspx Cloud Security Considerations http://www.infosecurity-magazine.com/blog/2011/11/14/cloud-security-considerations/452.aspx <h5>By Ken Biery</h5> <p>Can a cloud be as secure as a traditional network? In a word, yes! I agree that some may find this statement surprising. Depending on the network, that may be a low bar, but good security principles and approaches are just as applicable to cloud environments as they are ... Mon, 14 Nov 2011 18:59:04 GMT http://www.infosecurity-magazine.com/blog/2011/11/14/cloud-security-considerations/452.aspx How to Manage “Bring Your Own Device” http://www.infosecurity-magazine.com/blog/2011/11/10/how-to-manage-bring-your-own-device/451.aspx <p>Long time since I&nbsp;blogged. It is time to &quot;come back :-)&quot;. The kick was that I&nbsp;started to work on a Windows 8 Slate as a secondary PC and thought about the consumerization scenario once more:</p> <p>A few years back a customer&rsquo;s CSO left the room when I said that this cu ... Thu, 10 Nov 2011 14:32:42 GMT http://www.infosecurity-magazine.com/blog/2011/11/10/how-to-manage-bring-your-own-device/451.aspx Apple Content in Infosecurity Virtual Conference http://www.infosecurity-magazine.com/blog/2011/11/7/apple-content-in-infosecurity-virtual-conference/448.aspx <p>It occurs to me that something (else) I haven't mentioned here is that <em>Infosecurity</em> magazine is running one of its <a target="_blank" href="http://bit.ly/qHW5LI"><font color="#7f1d1d">virtual conferences</font></a> on November 8th, with the virtual doors opening at 10.30 EST. If you're i ... Mon, 07 Nov 2011 19:01:36 GMT http://www.infosecurity-magazine.com/blog/2011/11/7/apple-content-in-infosecurity-virtual-conference/448.aspx What the Devil(Robber)? http://www.infosecurity-magazine.com/blog/2011/11/7/what-the-devilrobber-/447.aspx <p>It occurs to me that while I <a href="http://www.infosecurity-magazine.com/blog/2011/10/28/osxtsunami-flooding-new-markets/439.aspx">wrote here</a> about the interesting but apparently work-in-progress OSX/Tsunami (or Kaiten) port from Linux to OSX a while back, I haven't had the chance to mentio ... Mon, 07 Nov 2011 18:52:34 GMT http://www.infosecurity-magazine.com/blog/2011/11/7/what-the-devilrobber-/447.aspx Leveraging Managed Cloud Services to Meet Cloud Compliance Challenges http://www.infosecurity-magazine.com/blog/2011/11/4/leveraging-managed-cloud-services-to-meet-cloud-compliance-challenges/446.aspx <h5>By Allen Allison</h5> <p>Regardless of your industry, customer base, or product, it is highly likely that you face regulatory compliance requirements. If you handle Protected Health Information (PHI), the Health Insurance Portability and Accountability Act (HIPAA) &ndash; along with the HITECH ... Fri, 04 Nov 2011 18:33:58 GMT http://www.infosecurity-magazine.com/blog/2011/11/4/leveraging-managed-cloud-services-to-meet-cloud-compliance-challenges/446.aspx Cloud Security: Confident, Fearful, or Surprised? http://www.infosecurity-magazine.com/blog/2011/11/4/cloud-security--confident-fearful-or-surprised/445.aspx <h5>By Ken Biery</h5> <p>This two-part guest blog series explores the topic of cloud security. Part one of the series focuses on the questions enterprise IT decision makers should ask when considering moving business applications to a cloud-based computing environment.</p> <p>There is no shortage ... Fri, 04 Nov 2011 18:10:44 GMT http://www.infosecurity-magazine.com/blog/2011/11/4/cloud-security--confident-fearful-or-surprised/445.aspx IT security vendors can’t all be right, but they can all be wrong http://www.infosecurity-magazine.com/blog/2011/11/1/it-security-vendors-cant-all-be-right-but-they-can-all-be-wrong/443.aspx <p>From recent briefings with a number of IT security vendors it would seem that most can now identify any new threat immediately and that at the same time none of them can. This contradiction is down to the &ldquo;<i>we can, they can&rsquo;t</i>&rdquo; mantra that any vendor of any product is bound ... Tue, 01 Nov 2011 09:16:00 GMT http://www.infosecurity-magazine.com/blog/2011/11/1/it-security-vendors-cant-all-be-right-but-they-can-all-be-wrong/443.aspx Attacking the Human Wall http://www.infosecurity-magazine.com/blog/2011/10/28/attacking-the-human-wall/441.aspx <p>Good post <a href="https://www.brandenwilliams.com/blog/2011/10/11/attack-the-humans-first/">here </a>from Brandon Williams on the inherent weakness of security processes that ignores the human element.</p> <p>There's nothing new in saying that humans are the weakest link in the security chain ( ... Fri, 28 Oct 2011 22:31:19 GMT http://www.infosecurity-magazine.com/blog/2011/10/28/attacking-the-human-wall/441.aspx The 1985 iPhone In a Truck http://www.infosecurity-magazine.com/blog/2011/10/28/the-1985-iphone-in-a-truck/440.aspx <p>&nbsp;People of a certain age often enjoy recalling for younger folk the size of the early mobile phones that were lugged around in the mid-1980s, whilst marvelling at the latest smartphones. These brick-sized devices could not even send text (SMS) messages (the first of which was sent in 1992); ... Fri, 28 Oct 2011 07:59:28 GMT http://www.infosecurity-magazine.com/blog/2011/10/28/the-1985-iphone-in-a-truck/440.aspx OSX/Tsunami: flooding new markets http://www.infosecurity-magazine.com/blog/2011/10/28/osxtsunami-flooding-new-markets/439.aspx <p>Matt Hartley asks the question &ldquo;<a href="http://www.datamation.com/open-source/linux-malware-are-we-there-yet-1.html">Linux Malware: Are We There Yet</a>?&rdquo;&nbsp; It seems strange, after so much exposure to the view that OS X is intrinsically so much safer than Windows, to read a piece ... Fri, 28 Oct 2011 01:03:37 GMT http://www.infosecurity-magazine.com/blog/2011/10/28/osxtsunami-flooding-new-markets/439.aspx Consumers Say No (to data leaks) http://www.infosecurity-magazine.com/blog/2011/10/25/consumers-say-no-to-data-leaks/436.aspx <p>A recent Quocirca <a href="http://www.infosecurity-magazine.com/blog/2011/9/16/responsible-data-leak-disclosure/407.aspx">blog post</a> pointed out there were good business reasons for disclosing data breaches as well as an increasing number of regulatory ones. For those organisations not convinc ... Tue, 25 Oct 2011 08:14:45 GMT http://www.infosecurity-magazine.com/blog/2011/10/25/consumers-say-no-to-data-leaks/436.aspx Don’t Forget the Network http://www.infosecurity-magazine.com/blog/2011/10/21/dont-forget-the-network/435.aspx <p>A <a href="http://www.newscientist.com/article/mg21128324.700-light-is-not-fast-enough-for-highspeed-stock-trading.html">recent news story in <em>New Scientist</em></a> reminds us how important the speed of network communications has become for some organisations:</p> <blockquote> <p><em>&helli ... Fri, 21 Oct 2011 09:36:16 GMT http://www.infosecurity-magazine.com/blog/2011/10/21/dont-forget-the-network/435.aspx “Testing the Testers”: Certification and Cloud Computing http://www.infosecurity-magazine.com/blog/2011/10/19/testing-the-testers-certification-and-cloud-computing/433.aspx <h5>By the <a href="https://www.isc2.org/gabewb/Default.aspx">(ISC)&sup2; U.S. Government Advisory Board Executive Writers Bureau</a> (EWB)</h5> <p>&nbsp;</p> <p>Cloud computing is becoming ubiquitous throughout the federal government, and while the adoption of this technology may be more widespre ... Wed, 19 Oct 2011 23:07:38 GMT http://www.infosecurity-magazine.com/blog/2011/10/19/testing-the-testers-certification-and-cloud-computing/433.aspx Avoiding (awful) bad practice at audit time http://www.infosecurity-magazine.com/blog/2011/10/18/avoiding-awful-bad-practice-at-audit-time/432.aspx <p>Quocirca saw an estimate recently that IT security managers can spend as much as 30% of their time preparing for and delivering audits. This is mundane and uninteresting work and if it can be automated &ndash; all the better. However, recent Quocirca research, sponsored by sys-admin tools vendor ... Tue, 18 Oct 2011 16:54:31 GMT http://www.infosecurity-magazine.com/blog/2011/10/18/avoiding-awful-bad-practice-at-audit-time/432.aspx Social Engineering: A Real Persistent Threat http://www.infosecurity-magazine.com/blog/2011/10/15/social-engineering-a-real-persistent-threat/431.aspx <p>I hear a great deal about 0-day attacks, and a great deal of security vendor PR is (depending on market sector) predicated on the assumption that 0-days are the most prevalent threat. Notwithstanding some highly visible 0-day attacks over the years, I don&rsquo;t believe that to be true.</p> <di ... Sat, 15 Oct 2011 14:12:29 GMT http://www.infosecurity-magazine.com/blog/2011/10/15/social-engineering-a-real-persistent-threat/431.aspx Failing PCI Policy? http://www.infosecurity-magazine.com/blog/2011/10/13/failing-pci-policy/430.aspx <p><a href="http://www.verizonbusiness.com/resources/reports/rp_2011-payment-card-industry-compliance-report_en_xg.pdf">This is a good read </a>if you missed it&nbsp;&ndash; the most recent report by the ever-interesting Verizon PCI and Risk Intelligence Teams on the state of PCI Compliance.</p> <p ... Thu, 13 Oct 2011 20:34:53 GMT http://www.infosecurity-magazine.com/blog/2011/10/13/failing-pci-policy/430.aspx Goodnight Irene: A Lesson in Disaster Planning http://www.infosecurity-magazine.com/blog/2011/10/13/goodnight-irene-a-lesson-in-disaster-planning/429.aspx <p>Many large organizations make preparations for disaster, but the recent hurricane that hit the East Coast of the US illustrates why long-term business continuity planning on a local level can be critical to survival &ndash; and your employees&rsquo; well being.</p> <p>While much of what we cover ... Thu, 13 Oct 2011 18:22:12 GMT http://www.infosecurity-magazine.com/blog/2011/10/13/goodnight-irene-a-lesson-in-disaster-planning/429.aspx Virus Bulletin and the Mac, then and now http://www.infosecurity-magazine.com/blog/2011/10/12/virus-bulletin-and-the-mac-then-and-now/427.aspx <p>Last week I was in Barcelona for this year's <a href="http://www.virusbtn.com/conference/vb2011">Virus Bulletin conference</a> (the 21st, which makes me feel very old even though I wasn't there at the beginning!). The first time I presented there was in 1997, when <a href="http://macviruscom.file ... Wed, 12 Oct 2011 18:33:15 GMT http://www.infosecurity-magazine.com/blog/2011/10/12/virus-bulletin-and-the-mac-then-and-now/427.aspx False Sense of Security among WiFi Users http://www.infosecurity-magazine.com/blog/2011/10/11/false-sense-of-security-among-wifi-users/425.aspx <div style="text-align:justify"><a href="http://www.wi-fi.org/news_articles.php?f=media_news&amp;news_id=1085">A recent survey conducted by Wakefield Research</a> for the WiFi Alliance has revealed that 97% of surveyed WiFi users believe that the data on their devices and networks is &ldquo;safe and ... Tue, 11 Oct 2011 16:00:58 GMT http://www.infosecurity-magazine.com/blog/2011/10/11/false-sense-of-security-among-wifi-users/425.aspx Test Accounts: Another Compliance Risk http://www.infosecurity-magazine.com/blog/2011/10/7/test-accounts--another-compliance-risk/424.aspx <h5>By Merritt Maximi</h5> <p>A major benefit associated with deploying identity management and/or identity governance into an organization is that these solutions provide the ability to detect and remove orphan accounts. Orphan accounts refer to active accounts belonging to a user who is no longe ... Fri, 07 Oct 2011 20:14:14 GMT http://www.infosecurity-magazine.com/blog/2011/10/7/test-accounts--another-compliance-risk/424.aspx HyperCard Viruses? You're History! http://www.infosecurity-magazine.com/blog/2011/10/3/hypercard-viruses-youre-history/422.aspx <p>I see that Graham Cluley has revised his excellent timeline&nbsp;article <a data-mce-href="http://nakedsecurity.sophos.com/2011/10/03/mac-malware-history/" rel="bookmark" href="http://nakedsecurity.sophos.com/2011/10/03/mac-malware-history/" title="Permalink to The short history of Mac malware: 1 ... Mon, 03 Oct 2011 15:07:46 GMT http://www.infosecurity-magazine.com/blog/2011/10/3/hypercard-viruses-youre-history/422.aspx When It Comes To Cloud Security, Don’t Forget SSL http://www.infosecurity-magazine.com/blog/2011/9/30/when-it-comes-to-cloud-security-dont-forget-ssl/421.aspx <h5>By Michael Lin, Symantec</h5> <p>Cloud computing appears here to stay, bringing with it new challenges and security risks on one hand, while on the other hand boasting efficiencies, cost savings and competitive advantage. With the new security risks of cloud and the mounting skill and cunning o ... Fri, 30 Sep 2011 19:04:44 GMT http://www.infosecurity-magazine.com/blog/2011/9/30/when-it-comes-to-cloud-security-dont-forget-ssl/421.aspx Securing Your File Transfer in the Cloud http://www.infosecurity-magazine.com/blog/2011/9/30/securing-your-file-transfer-in-the-cloud/420.aspx <h5>By Stuart Lisk</h5> <p>File transfer has been around since the beginning of time. Ok, well maybe that is an exaggeration, but the point is, file transfer was one of the earliest uses of &ldquo;network&rdquo; computing dating back to the early 1970&rsquo;s when IBM introduced the floppy disk. Wh ... Fri, 30 Sep 2011 19:00:30 GMT http://www.infosecurity-magazine.com/blog/2011/9/30/securing-your-file-transfer-in-the-cloud/420.aspx Apple Raises the "Anti" for Revir, but Intego gets Flashbacks http://www.infosecurity-magazine.com/blog/2011/9/27/apple-raises-the-anti-for-revir-but-intego-gets-flashbacks/417.aspx <p><a href="http://www.h-online.com/security/news/item/Apple-updates-malware-definition-list-to-defend-against-PDF-trojan-1350430.html">The H</a> (Heise) reported today that Apple has added detection for OSX/Revir to its XProtect facility, provided&nbsp;in OS&nbsp;X versions since Snow Leopard.</p> ... Tue, 27 Sep 2011 18:16:17 GMT http://www.infosecurity-magazine.com/blog/2011/9/27/apple-raises-the-anti-for-revir-but-intego-gets-flashbacks/417.aspx Revir's Ride not a Derby Winner http://www.infosecurity-magazine.com/blog/2011/9/26/revirs-ride-not-a-derby-winner/415.aspx <p>Since new Mac-specific malware is pretty rare, I suppose I can't really ignore the malware that most AV companies are calling Revir.A (the dropper and downloader) and Imuler.A (the backdoor that carries the sting, such as it is), though Sophos is calling it <a href="http://nakedsecurity.sophos.co ... Mon, 26 Sep 2011 13:17:41 GMT http://www.infosecurity-magazine.com/blog/2011/9/26/revirs-ride-not-a-derby-winner/415.aspx Insider Attack: Three Key Considerations http://www.infosecurity-magazine.com/blog/2011/9/21/insider-attack-three-key-considerations/411.aspx <p>&ldquo;Insider attack&rdquo; is back in the news, getting attention again, with good reason. This particular article, &ldquo;<a href="http://www.infosecurity-us.com/view/20811/insiders-increasingly-linked-to-data-breaches-in-the-financial-sector/">Insiders increasingly linked to data breaches in ... Wed, 21 Sep 2011 15:45:27 GMT http://www.infosecurity-magazine.com/blog/2011/9/21/insider-attack-three-key-considerations/411.aspx Password Shadowing: The Lion Sleeps Tonight http://www.infosecurity-magazine.com/blog/2011/9/20/password-shadowing-the-lion-sleeps-tonight/410.aspx <p>Patrick Dunstan has put up a disquieting <a href="http://www.defenceindepth.net/2011/09/cracking-os-x-lion-passwords.html">post on Defence in Depth</a>, following up on a <a href="http://www.defenceindepth.net/2009/12/cracking-os-x-passwords.html">2009 blog post</a> on cracking OS X passwords. No ... Tue, 20 Sep 2011 20:42:25 GMT http://www.infosecurity-magazine.com/blog/2011/9/20/password-shadowing-the-lion-sleeps-tonight/410.aspx OMG! TLS! You BEAST! http://www.infosecurity-magazine.com/blog/2011/9/20/omg-tls-you-beast/409.aspx <p>&nbsp;</p> <div>A couple of security researchers are due to present a way to compromise TLS 1.0 at a <a href="http://ekoparty.org/cronograma.php">conference in Argentina</a> &nbsp;next week (scroll to end of page). Thai Duong and Juliano Rizzo have found a way - codenamed &quot;BEAST&quot; - to ... Tue, 20 Sep 2011 08:06:09 GMT http://www.infosecurity-magazine.com/blog/2011/9/20/omg-tls-you-beast/409.aspx Responsible Data Leak Disclosure http://www.infosecurity-magazine.com/blog/2011/9/16/responsible-data-leak-disclosure/407.aspx <p>There has been plenty written, not least by Quocirca, on the danger of data loss and how to prevent it. Less has been said about how to clear up afterwards; when the measures taken to protect a business from such losses have failed or were not present in the first place. In particular the respons ... Fri, 16 Sep 2011 12:48:22 GMT http://www.infosecurity-magazine.com/blog/2011/9/16/responsible-data-leak-disclosure/407.aspx The “Don’t Trust Model” of Cloud Computing http://www.infosecurity-magazine.com/blog/2011/9/14/the-dont-trust-model-of-cloud-computing/406.aspx <h5>By&nbsp;Ed King</h5> <p>The elephant in the room when it comes to barriers to the growth and adoption of cloud computing by enterprises is the lack of trust held for cloud service providers. Enterprise IT has legitimate concerns over the security, integrity, and reliability of cloud-based serv ... Wed, 14 Sep 2011 20:03:25 GMT http://www.infosecurity-magazine.com/blog/2011/9/14/the-dont-trust-model-of-cloud-computing/406.aspx Marketing and Upgrades http://www.infosecurity-magazine.com/blog/2011/9/13/marketing-and-upgrades/404.aspx <p>Jonny Evans has made some interesting points at <a href="http://blogs.computerworld.com/18927/has_apple_handled_the_diginotar_attack_effectively">Computer World</a>&nbsp;regarding Apple's belated removal of DigiNotar root certificates from OS&nbsp;X (specifically Lion and Snow Leopard). Clearly, ... Tue, 13 Sep 2011 17:24:00 GMT http://www.infosecurity-magazine.com/blog/2011/9/13/marketing-and-upgrades/404.aspx Seven Steps to Securing File Transfer’s Journey to the Cloud http://www.infosecurity-magazine.com/blog/2011/9/12/seven-steps-to-securing-file-transfers-journey-to-the-cloud/402.aspx <h5>By Oded Valin</h5> <p>&ldquo;When it absolutely, positively has to be there overnight.&rdquo; There&rsquo;s a lot we can identify with when it comes to reciting FedEx&rsquo;s famous slogan, especially as it relates to modern file transfer processes. When you think about sharing health care rec ... Mon, 12 Sep 2011 19:58:24 GMT http://www.infosecurity-magazine.com/blog/2011/9/12/seven-steps-to-securing-file-transfers-journey-to-the-cloud/402.aspx Now You See It, Now You Don't... http://www.infosecurity-magazine.com/blog/2011/9/7/now-you-see-it-now-you-dont/399.aspx <p>Apple security, that is.</p> <p>Clearly, the company's <a href="http://jobs.apple.com/index.ajs?BID=1&amp;method=mExternal.showJob&amp;RID=91081&amp;CurrentPage=1">hiring</a> of a product security manager carries a very clear &quot;we need to improve&quot; message, but it's clearly tied to a mar ... Wed, 07 Sep 2011 18:26:56 GMT http://www.infosecurity-magazine.com/blog/2011/9/7/now-you-see-it-now-you-dont/399.aspx How Not to Secure a CA http://www.infosecurity-magazine.com/blog/2011/9/7/how-not-to-secure-a-ca/397.aspx <p>&nbsp;</p> <div>Fox-IT have published a preliminary report on the <a href="http://infosecreviews.com/blog/?p=44">DigiNotar breach</a>. It appears that the number of spoofed certificates is much greater than previously suspected, and Iran was a prime target, so once again we may have an example o ... Wed, 07 Sep 2011 12:10:07 GMT http://www.infosecurity-magazine.com/blog/2011/9/7/how-not-to-secure-a-ca/397.aspx How Signify weathered the RSA breach storm: Eleanor Dallaway chats to Dave Abraham, co-founder and CEO of Signify http://www.infosecurity-magazine.com/blog/2011/9/1/how-signify-weathered-the-rsa-breach-storm-eleanor-dallaway-chats-to-dave-abraham-cofounder-and-ceo-of-signify-/394.aspx <p> <div>Last week, I went to lunch with Dave Abraham, <a href="http://www.infosecurity-magazine.com/view/19461/signify-moves-2fa-onto-android-smartphones-and-tablets">co-founder and CEO of Signify,</a> an information security company that delivers two-factor authentication.</div> <div>&nbsp;</div ... Thu, 01 Sep 2011 11:50:38 GMT http://www.infosecurity-magazine.com/blog/2011/9/1/how-signify-weathered-the-rsa-breach-storm-eleanor-dallaway-chats-to-dave-abraham-cofounder-and-ceo-of-signify-/394.aspx Don’t let your brand name be flushed away http://www.infosecurity-magazine.com/blog/2011/9/1/dont-let-your-brand-name-be-flushed-away/392.aspx <p>&nbsp;A snippet in Private Eye earlier this year (July 8<sup>th</sup>, 2011) showed how touchy companies can get about the use of their brand names. Following the unfortunate death of a festival goer in a toilet at Glastonbury (who also happened to be political activist and friend of the UK&rsquo ... Thu, 01 Sep 2011 08:12:15 GMT http://www.infosecurity-magazine.com/blog/2011/9/1/dont-let-your-brand-name-be-flushed-away/392.aspx Comex: Scrumper turned Gamekeeper http://www.infosecurity-magazine.com/blog/2011/8/26/comex-scrumper-turned-gamekeeper/391.aspx <p><span style="font-size: 9pt">So can I resist the temptation to blog about the departure of Steve Jobs? Well, yes, though I wish Jobs, his successor, and the company well. But I'm not really qualified to add to the flurry of business analysis that has preoccupied the media since the announcement. ... Fri, 26 Aug 2011 20:30:41 GMT http://www.infosecurity-magazine.com/blog/2011/8/26/comex-scrumper-turned-gamekeeper/391.aspx Five Ways to Achieve Cloud Compliance http://www.infosecurity-magazine.com/blog/2011/8/26/five-ways-to-achieve-cloud-compliance/390.aspx <h5>By Allen Allison </h5> <p>With the rapid adoption of cloud computing technologies, IT organizations have found a way to deliver applications and services more quickly and efficiently to their customers, incorporating the nearly ubiquitous utility-like platforms of managed cloud services compani ... Fri, 26 Aug 2011 19:27:04 GMT http://www.infosecurity-magazine.com/blog/2011/8/26/five-ways-to-achieve-cloud-compliance/390.aspx Earthquakes and Cloud Servers http://www.infosecurity-magazine.com/blog/2011/8/24/earthquakes-and-cloud-servers/389.aspx <p>It was at about 2 PM when I had settled into my chair to begin moderating our latest webinar on securing cloud servers. Not far into my introductions, I noticed a bit of a rumble beneath my feet, as if someone where taking a jackhammer to the ceiling on the floor below. It was a slight hum at fir ... Wed, 24 Aug 2011 20:03:21 GMT http://www.infosecurity-magazine.com/blog/2011/8/24/earthquakes-and-cloud-servers/389.aspx My gift to you: Attend a world-class information security conference in your slippers! http://www.infosecurity-magazine.com/blog/2011/8/23/my-gift-to-you-attend-a-worldclass-information-security-conference-in-your-slippers-/388.aspx <p>&nbsp;</p> <div>It's that time of year again. As the rain cruelly chucks itself at our office windows in Richmond, I'm reminded that summer (or what we've had of it) is starting to surrender itself to Autumn, which means that our <a href="http://www.infosecurity-magazine.com/virtualconference/20 ... Tue, 23 Aug 2011 15:41:14 GMT http://www.infosecurity-magazine.com/blog/2011/8/23/my-gift-to-you-attend-a-worldclass-information-security-conference-in-your-slippers-/388.aspx Dropping In http://www.infosecurity-magazine.com/blog/2011/8/22/dropping-in/387.aspx <p><a href="http://www.stjernstrom.com">Magnus Stjernstrom&nbsp;</a>recently pointed out Cisco&rsquo;s advice on how to <a href="http://tools.cisco.com/security/center/viewAlert.x?alertId=23896">detect Dropbox traffic </a>originating in your network.</p> <p>It&rsquo;s interesting given what it tell ... Mon, 22 Aug 2011 14:47:51 GMT http://www.infosecurity-magazine.com/blog/2011/8/22/dropping-in/387.aspx So, What Makes You a Cyber ‘Expert’? http://www.infosecurity-magazine.com/blog/2011/8/22/so-what-makes-you-a-cyber-expert/386.aspx <h5> <title></title> By the <a href="https://www.isc2.org/gabewb/Default.aspx">(ISC)&sup2; U.S. Government Advisory Board Executive Writers Bureau</a> (EWB)</h5> <p>&nbsp;</p> <p>How many cybersecurity practitioners have had a colleague either in information technology (IT), or worse yet, from a ... Mon, 22 Aug 2011 13:25:47 GMT http://www.infosecurity-magazine.com/blog/2011/8/22/so-what-makes-you-a-cyber-expert/386.aspx Shhh!!! No Roaring in the Library! http://www.infosecurity-magazine.com/blog/2011/8/19/shhh-no-roaring-in-the-library/385.aspx <p>It may lack drama after all the excitement of BlackHat (which is my excuse for not having noticed it earlier), but Apple QuickTime 7.7 <a href="http://lists.apple.com/archives/security-announce/2011//Aug/msg00000.html">fixes</a> a stack-based buffer overflow&nbsp;issue that was flagged officially ... Fri, 19 Aug 2011 11:55:55 GMT http://www.infosecurity-magazine.com/blog/2011/8/19/shhh-no-roaring-in-the-library/385.aspx Rethinking Information Security http://www.infosecurity-magazine.com/blog/2011/8/15/rethinking-information-security/383.aspx <p>&nbsp;</p> <p>I was reminded the other day that the World Wide Web is 20 years old this month, and it came as a shock to realise I've been involved with it for all but the first three years.<br /> <br /> Things move very fast in IT: ten years is a lifetime, and 20 is a whole era. Why then, aft ... Mon, 15 Aug 2011 20:00:47 GMT http://www.infosecurity-magazine.com/blog/2011/8/15/rethinking-information-security/383.aspx Not with a Bang, but a Whimper http://www.infosecurity-magazine.com/blog/2011/8/10/not-with-a-bang-but-a-whimper/380.aspx <p>The high-profile security conference season is usually enlivened with a few Mac attacks, Apple app attacks, and other euphonious assonances. While the most consistent source of such diversions is probably <a href="http://macviruscom.wordpress.com/2011/03/14/pwn2own-hackers-vs-apple-ipv6-privacy/" ... Wed, 10 Aug 2011 09:57:24 GMT http://www.infosecurity-magazine.com/blog/2011/8/10/not-with-a-bang-but-a-whimper/380.aspx Losing Control http://www.infosecurity-magazine.com/blog/2011/8/2/losing-control/376.aspx <p>I saw <a href="http://www.zdnet.com/blog/igeneration/microsoft-admits-patriot-act-can-access-eu-based-cloud-data/11225">this&nbsp;</a>recently and it really drove home on the key truths about cloud computing when it comes to control over your information.</p> <p>Here's a great quote:</p> <p sty ... Tue, 02 Aug 2011 19:50:36 GMT http://www.infosecurity-magazine.com/blog/2011/8/2/losing-control/376.aspx Do the goings-on in student dorms spell the end for Microsoft? http://www.infosecurity-magazine.com/blog/2011/7/28/do-the-goingson-in-student-dorms-spell-the-end-for-microsoft/373.aspx <p>This week Quocirca had a briefing with a security vendor which provided an insight into a fundamental change going on in the use of IT and one of the major drivers for that change. The vendor was Bradford Networks, (named not for the city in Yorkshire UK, but small town in New Hampshire USA).</p> ... Thu, 28 Jul 2011 15:53:19 GMT http://www.infosecurity-magazine.com/blog/2011/7/28/do-the-goingson-in-student-dorms-spell-the-end-for-microsoft/373.aspx Cloud Signaling – The Data Center’s Best Defense http://www.infosecurity-magazine.com/blog/2011/7/27/cloud-signaling--the-data-centers-best-defense/372.aspx <h5>By Rakesh Shah</h5> <p>Recent high-profile security incidents heightened awareness of how Distributed Denial of Service (DDoS) attacks can compromise the availability of critical websites, applications and services. Any downtime can result in lost business, brand damage, financial penalties, a ... Wed, 27 Jul 2011 19:39:34 GMT http://www.infosecurity-magazine.com/blog/2011/7/27/cloud-signaling--the-data-centers-best-defense/372.aspx Pass the Buck: Who 's Responsible for Security in the Cloud? http://www.infosecurity-magazine.com/blog/2011/7/27/pass-the-buck-who-s-responsible-for-security-in-the-cloud-/371.aspx <h5>By Todd Thiemann</h5> <p>Cloud computing changes the equation of responsibility and accountability for information security and poses some new challenges for enterprise IT. At Vormetric we are working with service providers and enterprises to help them secure and control sensitive data in the c ... Wed, 27 Jul 2011 19:30:28 GMT http://www.infosecurity-magazine.com/blog/2011/7/27/pass-the-buck-who-s-responsible-for-security-in-the-cloud-/371.aspx Federal Agency Recognizes Information Security as a Separate, Distinct Career Field – But it’s not OPM http://www.infosecurity-magazine.com/blog/2011/7/26/federal-agency-recognizes-information-security-as-a-separate-distinct-career-field--but-its-not-opm-/369.aspx <p>&nbsp;</p> <div>By the <a href="https://www.isc2.org/gabewb/Default.aspx">(ISC)&sup2; U.S. Government Advisory Board Executive Writers Bureau</a> (EWB)</div> <div>&nbsp;</div> <div>In a recent article, <a href="http://www.govinfosecurity.com/articles.php?art_id=3833">&quot;Infosec Joblessness ... Tue, 26 Jul 2011 01:22:09 GMT http://www.infosecurity-magazine.com/blog/2011/7/26/federal-agency-recognizes-information-security-as-a-separate-distinct-career-field--but-its-not-opm-/369.aspx Black, Yellow, Blue: By John Walker http://www.infosecurity-magazine.com/blog/2011/7/21/black-yellow-blue-by-john-walker/366.aspx <p><strong><em>I'm posting this blog on behalf of John&nbsp;Walker, whose account is temporarily having some 'down time'...</em></strong></p> <p>Recent reports have stated that the Anonymous Hacktivists group is to set up its own social networking site and service, after they were understandably re ... Thu, 21 Jul 2011 15:23:23 GMT http://www.infosecurity-magazine.com/blog/2011/7/21/black-yellow-blue-by-john-walker/366.aspx PKI Still Matters, Especially in the Cloud http://www.infosecurity-magazine.com/blog/2011/7/15/pki-still-matters-especially-in-the-cloud/364.aspx <p>&nbsp;By: Merritt Maxim<br /> Director of IAM Product Marketing<br /> CA Technologies Inc.</p> <p>Infosec veterans probably remember (with a smirk) how Public Key Infrastructure (PKI) was heralded as the next &ldquo;big thing&rdquo; in information security at the dawn of the 21st century. Wh ... Fri, 15 Jul 2011 19:55:23 GMT http://www.infosecurity-magazine.com/blog/2011/7/15/pki-still-matters-especially-in-the-cloud/364.aspx Mitigating denial of service attacks http://www.infosecurity-magazine.com/blog/2011/7/13/mitigating-denial-of-service-attacks/361.aspx <p>The common view of a denial of service (DoS) attack is that of a flood of requests to a given web server that overwhelms it and render it useless, at least temporarily. Such attacks have most commonly been perpetrated via botnets, a network of hijacked computers compromised by malware coordinated ... Wed, 13 Jul 2011 12:18:23 GMT http://www.infosecurity-magazine.com/blog/2011/7/13/mitigating-denial-of-service-attacks/361.aspx Understanding Best-in-Class Cloud Security Measures and How to Evaluate Providers http://www.infosecurity-magazine.com/blog/2011/7/11/understanding-bestinclass-cloud-security-measures-and-how-to-evaluate-providers/360.aspx <p>&nbsp;By Fahim Siddiqui</p> <p>Despite a broader interest in cloud computing, many organizations have been reluctant to embrace the technology due to security concerns. While today&rsquo;s businesses can benefit from cloud computing&rsquo;s on-demand capacity and economies of scale, the model do ... Mon, 11 Jul 2011 20:09:11 GMT http://www.infosecurity-magazine.com/blog/2011/7/11/understanding-bestinclass-cloud-security-measures-and-how-to-evaluate-providers/360.aspx Watch Out for the Top 6 Cloud Gotchas! http://www.infosecurity-magazine.com/blog/2011/7/11/watch-out-for-the-top-6-cloud-gotchas/359.aspx <h5>&nbsp;By Margaret Dawson</h5> <p>I am a huge proponent of cloud-based solutions, but I also have a bailiwick for people who look to the cloud just for cloud&rsquo;s sake, and do not take time to do the due diligence. While the cloud can bring strong technical, economic and business benefits if ... Mon, 11 Jul 2011 19:56:13 GMT http://www.infosecurity-magazine.com/blog/2011/7/11/watch-out-for-the-top-6-cloud-gotchas/359.aspx The Cost of a Data Breach http://www.infosecurity-magazine.com/blog/2011/7/8/the-cost-of-a-data-breach/358.aspx <p>As I have done in a previous post, I am taking this opportunity to share with our online audience some of the letters we receive regarding our online and print coverage. This letter comes from a reader of our most recent issue, and my response to his comments can be found below the letter. As alw ... Fri, 08 Jul 2011 18:38:20 GMT http://www.infosecurity-magazine.com/blog/2011/7/8/the-cost-of-a-data-breach/358.aspx Editor's perspective: Infosecurity Europe Joins Forces with Infosecurity Magazine http://www.infosecurity-magazine.com/blog/2011/7/6/editors-perspective-infosecurity-europe-joins-forces-with-infosecurity-magazine/357.aspx <p> <div style="text-align: justify;">I hope that by now you have heard the <a href="http://www.infosecurity-magazine.com/view/19190/infosecurity-europe-joins-forces-with-infosecurity-magazine-online-news-site-to-create-stronger-united-market-offering-/">good news?</a> <a href="http://www.infosecur ... Wed, 06 Jul 2011 14:09:02 GMT http://www.infosecurity-magazine.com/blog/2011/7/6/editors-perspective-infosecurity-europe-joins-forces-with-infosecurity-magazine/357.aspx Smart Thinking http://www.infosecurity-magazine.com/blog/2011/7/1/smart-thinking/356.aspx <p>Most people may not immediately recognize the name Reinhold Niebuhr, but they are probably familiar with some version of his best known prayer:</p> <blockquote> <p>&quot;God grant me the serenity to accept the things I cannot change, courage to change the things I can change, and the wisdom to ... Fri, 01 Jul 2011 20:09:43 GMT http://www.infosecurity-magazine.com/blog/2011/7/1/smart-thinking/356.aspx Make the wrong career move, and you just may become structurally unemployed http://www.infosecurity-magazine.com/blog/2011/6/30/make-the-wrong-career-move-and-you-just-may-become-structurally-unemployed/355.aspx <p class="p1">A recent <em>Washington Post</em> article, &ldquo;<a href="http://www.washingtonpost.com/opinions/the-great-jobs-mismatch/2011/06/19/AGWdB3bH_story.html"><span class="s1">The great jobs mismatch</span></a>&rdquo;, points out that structural unemployment is caused by a mismatch between ... Thu, 30 Jun 2011 20:17:06 GMT http://www.infosecurity-magazine.com/blog/2011/6/30/make-the-wrong-career-move-and-you-just-may-become-structurally-unemployed/355.aspx In people we trust... http://www.infosecurity-magazine.com/blog/2011/6/29/in-people-we-trust/354.aspx <p>&nbsp;So, thus begins my blog. Admittedly, it&rsquo;s long overdue. My intention to blog has been very honourable (honestly), it&rsquo;s just the &lsquo;actually doing it&rsquo; bit which has been a little slack, to say the least.<br /> <br /> Yesterday, I spent the day at <a href="http://www.t ... Wed, 29 Jun 2011 12:52:40 GMT http://www.infosecurity-magazine.com/blog/2011/6/29/in-people-we-trust/354.aspx How Public Cloud Providers Can Improve Their Trustworthiness http://www.infosecurity-magazine.com/blog/2011/6/28/how-public-cloud-providers-can-improve-their-trustworthiness/353.aspx <h5>By Matthew Gardiner</h5> <p>When you meet someone you have never met for the first time, in a place you have never been to, do you trust him? Would you have him hold your wallet for you or would you share some sensitive personal information with him? Of course not. Obviously this person is no ... Tue, 28 Jun 2011 20:42:51 GMT http://www.infosecurity-magazine.com/blog/2011/6/28/how-public-cloud-providers-can-improve-their-trustworthiness/353.aspx Weinergate and The Case for Full Disclosure of Data Breaches http://www.infosecurity-magazine.com/blog/2011/6/23/weinergate-and-the-case-for-full-disclosure-of-data-breaches/352.aspx <p>Often when I chat with people within the industry, the one thing I expect is a consistent message akin to a broken record. </p> <p>De-perimiterization, consumerization, defense in depth &ndash; the list of things I hear brought up in nearly every conversation is as fine tuned as a political cand ... Thu, 23 Jun 2011 20:26:25 GMT http://www.infosecurity-magazine.com/blog/2011/6/23/weinergate-and-the-case-for-full-disclosure-of-data-breaches/352.aspx Unhealthy Irritation http://www.infosecurity-magazine.com/blog/2011/6/20/unhealthy-irritation/350.aspx <p>I have to admit, I find this sort of thing just irritating:</p> <p>The Register last week <a href="http://www.theregister.co.uk/2011/06/15/eight_million_health_records/">reported </a>that eight million patient records were lost on a laptop. Unencrypted records.&nbsp; No, really.</p> <p>As a spo ... Mon, 20 Jun 2011 21:18:38 GMT http://www.infosecurity-magazine.com/blog/2011/6/20/unhealthy-irritation/350.aspx Privacy Consequences of WiFi MAC Availability Over the Air http://www.infosecurity-magazine.com/blog/2011/6/16/privacy-consequences-of-wifi-mac-availability-over-the-air/348.aspx <p>In a recently released report titled <a href="http://www.newswire.ca/en/releases/archive/June2011/14/c5709.html">&ldquo;Wi-Fi Positioning Systems: Beware of Unintended Consequences&rdquo;</a>&nbsp; &ndash; by Ontario's Information and Privacy Commissioner, Dr. Ann Cavoukian, and Kim Cameron, a le ... Thu, 16 Jun 2011 09:33:53 GMT http://www.infosecurity-magazine.com/blog/2011/6/16/privacy-consequences-of-wifi-mac-availability-over-the-air/348.aspx The Human Factor Reigns Supreme! http://www.infosecurity-magazine.com/blog/2011/6/9/the-human-factor-reigns-supreme/346.aspx <p>Do you know who has access to your computer? Many agencies and corporations spend a majority of their budgets on new technological security software gimmicks while forgetting the human factor. Personnel security must be included as an integral part of information security. All of the technologic ... Thu, 09 Jun 2011 21:23:52 GMT http://www.infosecurity-magazine.com/blog/2011/6/9/the-human-factor-reigns-supreme/346.aspx Wild West of Data Security http://www.infosecurity-magazine.com/blog/2011/5/31/wild-west-of-data-security/343.aspx <p>Question for the day: What can the turn-of-the century cattle industry teach us about cloud security? Quite a lot, I believe&nbsp;&ndash; especially by the ways in which driving cattle and keeping data secure are so very different.</p> <p>Back in the 1880s driving cattle across the US was big bu ... Tue, 31 May 2011 15:56:51 GMT http://www.infosecurity-magazine.com/blog/2011/5/31/wild-west-of-data-security/343.aspx Finding a Home for BitLocker http://www.infosecurity-magazine.com/blog/2011/5/17/finding-a-home-for-bitlocker/339.aspx <p>With the last several <a href="http://www.infosecurity-us.com/blog/2011/4/14/opening-up-bitlocker-part-2--recovery-keys/317.aspx">posts </a>being about <a href="http://www.infosecurity-us.com/blog/2011/4/1/opening-up-bitlocker/311.aspx">BitLocker</a>&nbsp;&nbsp;(and especially Recovery Keys) hope ... Tue, 17 May 2011 15:54:51 GMT http://www.infosecurity-magazine.com/blog/2011/5/17/finding-a-home-for-bitlocker/339.aspx What, if Any, Cybersecurity Workforce Implications Resulted From the Averted Government Shutdown? http://www.infosecurity-magazine.com/blog/2011/5/12/what-if-any-cybersecurity-workforce-implications-resulted-from-the-averted-government-shutdown/338.aspx <p>While the Federal Government shutdown was averted thanks to some last-minute political gerrymandering and concessions by both sides of the aisle, it&rsquo;s quite instructive to reflect on the implications of shutdown on the federal cybersecurity workforce, including contracts and contractors.</p ... Thu, 12 May 2011 03:47:20 GMT http://www.infosecurity-magazine.com/blog/2011/5/12/what-if-any-cybersecurity-workforce-implications-resulted-from-the-averted-government-shutdown/338.aspx Security Standards – Why they are so Critical for the Cloud http://www.infosecurity-magazine.com/blog/2011/5/9/security-standards--why-they-are-so-critical-for-the-cloud/337.aspx <h5>By&nbsp;Matthew Gardiner</h5> <p>Everyone loves standards, right? When is the last time you heard a vendor proudly say that their product or service was closed and proprietary? However, it also seems that every time a new IT architecture sweeps through the market, this time one based on cloud ... Mon, 09 May 2011 19:32:10 GMT http://www.infosecurity-magazine.com/blog/2011/5/9/security-standards--why-they-are-so-critical-for-the-cloud/337.aspx OAuth – authentication and authorization for mobile applications http://www.infosecurity-magazine.com/blog/2011/5/3/oauth--authentication-and-authorization-for-mobile-applications/335.aspx <h5>By Paul Madsen</h5> <p>Federation is a model of identity management that distributes the various individual components of an identity operation amongst different actors. The presumption being that the jobs can be distributed according to which actors are best suited or positioned to take them o ... Tue, 03 May 2011 20:32:56 GMT http://www.infosecurity-magazine.com/blog/2011/5/3/oauth--authentication-and-authorization-for-mobile-applications/335.aspx Who Moved My Cloud? http://www.infosecurity-magazine.com/blog/2011/5/3/who-moved-my-cloud/334.aspx <h5>By Allen Allison</h5> <p>Managed cloud services are quickly being adopted by large enterprises. Organizations are increasingly embracing cloud technologies for core services like financial systems, IT infrastructure, online merchant sites, and messaging solutions. This adoption rate is creati ... Tue, 03 May 2011 19:27:07 GMT http://www.infosecurity-magazine.com/blog/2011/5/3/who-moved-my-cloud/334.aspx Five Guidelines for Cloud Computing and Device Security in The “Always Able” Era http://www.infosecurity-magazine.com/blog/2011/4/29/five-guidelines-for-cloud-computing-and-device-security-in-the-always-able-era/332.aspx <h5>By Mark Bregman</h5> <p>Chief Information Security Officers know instinctively that the world under their purview is undergoing a shift every bit as significant as the rise of the World Wide Web more than 15 years ago. The demand on our workforce to be ever more productive is driving us to reth ... Fri, 29 Apr 2011 18:35:10 GMT http://www.infosecurity-magazine.com/blog/2011/4/29/five-guidelines-for-cloud-computing-and-device-security-in-the-always-able-era/332.aspx Amazon Sneezed (and the Cloud Caught a Cold?) http://www.infosecurity-magazine.com/blog/2011/4/28/amazon-sneezed-and-the-cloud-caught-a-cold/329.aspx <blockquote> <p><em>Never confuse a single defeat with a final defeat.</em><br /> &nbsp;&ndash; F. Scott Fitzgerald</p> </blockquote> <p>So last week was, depending on who you ask, a terrible week for &quot;The Cloud,&quot; a wakeup call for businesses who want to use cloud services, or nothing ... Thu, 28 Apr 2011 17:06:38 GMT http://www.infosecurity-magazine.com/blog/2011/4/28/amazon-sneezed-and-the-cloud-caught-a-cold/329.aspx Protect the API Keys to your Cloud Kingdom http://www.infosecurity-magazine.com/blog/2011/4/20/protect-the-api-keys-to-your-cloud-kingdom/322.aspx <div style="background-color: rgb(255, 255, 255); padding-top: 5px; padding-right: 5px; padding-bottom: 5px; padding-left: 5px; margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "> <h5>By Mark O&rsquo;Neill</h5> <p>Much lip service is paid to protecting information in the C ... Wed, 20 Apr 2011 19:08:54 GMT http://www.infosecurity-magazine.com/blog/2011/4/20/protect-the-api-keys-to-your-cloud-kingdom/322.aspx Is Tokenization or Encryption Keeping You Up at Night? http://www.infosecurity-magazine.com/blog/2011/4/20/is-tokenization-or-encryption-keeping-you-up-at-night/321.aspx <h5>By Stuart Lisk, Senior Product Manager, Hubspan</h5> <div>Are you losing sleep over whether to implement tokenization or full encryption as your cloud security methodology? Do you find yourself lying awake wondering if you locked all the doors to your sensitive data? Your &ldquo;sleepless with ... Wed, 20 Apr 2011 18:27:54 GMT http://www.infosecurity-magazine.com/blog/2011/4/20/is-tokenization-or-encryption-keeping-you-up-at-night/321.aspx Constant Vigilance http://www.infosecurity-magazine.com/blog/2011/4/14/constant-vigilance/318.aspx <h5><b><span style="">By Jon Heimerl </span></b></h5> <h5>&nbsp;</h5> <p><span style="">Constant Vigilance. Mad-Eye Moody puts it very well. Constant Vigilance.</span></p> <p><span style="">Unfortunately, these days we need constant vigilance to help protect ourselves and companies from peril. Th ... Thu, 14 Apr 2011 20:00:05 GMT http://www.infosecurity-magazine.com/blog/2011/4/14/constant-vigilance/318.aspx Opening up BitLocker, part 2 – Recovery Keys http://www.infosecurity-magazine.com/blog/2011/4/14/opening-up-bitlocker-part-2--recovery-keys/317.aspx <p><a href="http://www.infosecurity-us.com/blog/2011/4/1/opening-up-bitlocker/311.aspx">Last time&nbsp;</a> I covered an introduction to BitLocker, the Trusted Platform Module (TPM) and what TPM does to assist in keeping your system secure. This time I'm writing about the most important aspect of Bi ... Thu, 14 Apr 2011 17:54:58 GMT http://www.infosecurity-magazine.com/blog/2011/4/14/opening-up-bitlocker-part-2--recovery-keys/317.aspx Cybersecurity: The Road Ahead http://www.infosecurity-magazine.com/blog/2011/4/14/cybersecurity-the-road-ahead/316.aspx <p>This paper by the <a target="_blank" href="http://www.dcaf.ch/Publications/Publication-Detail?lng=en&amp;id=126370"><strong><font color="#365da0">Geneva Centre for the Democratic Control of Armed Forces (DCAF)</font></strong></a> was just brought to my attention. A piece of work that is definit ... Thu, 14 Apr 2011 11:07:20 GMT http://www.infosecurity-magazine.com/blog/2011/4/14/cybersecurity-the-road-ahead/316.aspx Cloud Annexation http://www.infosecurity-magazine.com/blog/2011/4/12/cloud-annexation/315.aspx <h5>By Stephen R Carter</h5> <div>&nbsp;</div> <div>The Cloud is the next evolutionary step in the life of the Internet. From the experimental ARPANET (Advanced Research Projects Agency Network) to the Internet to the Web &ndash; and now to the Cloud &ndash; the evolution continues to advance inte ... Tue, 12 Apr 2011 20:47:53 GMT http://www.infosecurity-magazine.com/blog/2011/4/12/cloud-annexation/315.aspx The Future of Security http://www.infosecurity-magazine.com/blog/2011/4/11/the-future-of-security/314.aspx <p>Visitors to the recent RSA Conference in San Francisco were treated to a forward-looking <a href="http://media.omediaweb.com/rsa2011/keynotes/webcast.htm?id=3-5">keynote</a> by City University of New York professor and television personality Michio Kaku. His presentation on the next 20 years of c ... Mon, 11 Apr 2011 16:44:59 GMT http://www.infosecurity-magazine.com/blog/2011/4/11/the-future-of-security/314.aspx On First Base with Stolen Email Addresses http://www.infosecurity-magazine.com/blog/2011/4/4/on-first-base-with-stolen-email-addresses/313.aspx <p><a href="http://www.cnn.com/2011/TECH/web/04/04/epsilon.stolen.emails/">CNN continues to report</a> on the compromise of email addresses and names from Epsilon systems over the weekend and the potential impact it may have on net citizens. There is fear and uncertainty that comes with any compromi ... Mon, 04 Apr 2011 19:22:47 GMT http://www.infosecurity-magazine.com/blog/2011/4/4/on-first-base-with-stolen-email-addresses/313.aspx Privileged Administrators and the Cloud: Who will Watch the Watchmen? http://www.infosecurity-magazine.com/blog/2011/4/1/privileged-administrators-and-the-cloud-who-will-watch-the-watchmen/312.aspx <h5>By Matthew Gardiner</h5> <p>One of the key advantages of the cloud, whether public or private, flows from a well-known econometric concept known as &ldquo;economies of scale.&rdquo; The concept of economies of scale refers to an operation that to a point gets more efficient as it gets bigger &n ... Fri, 01 Apr 2011 19:52:55 GMT http://www.infosecurity-magazine.com/blog/2011/4/1/privileged-administrators-and-the-cloud-who-will-watch-the-watchmen/312.aspx Opening up BitLocker http://www.infosecurity-magazine.com/blog/2011/4/1/opening-up-bitlocker/311.aspx <p>It's hard to avoid the flurry of bad press following the recent loss of a laptop by a <a href="http://www.infosecurity-us.com/view/16946/bp-loses-laptop-containing-details-of-13000-oil-spill-victims/">BP employee.</a> Unfortunately for all concerned, the lost laptop contained the names and person ... Fri, 01 Apr 2011 18:44:09 GMT http://www.infosecurity-magazine.com/blog/2011/4/1/opening-up-bitlocker/311.aspx Debunking the Top Three Cloud Security Myths http://www.infosecurity-magazine.com/blog/2011/3/30/debunking-the-top-three-cloud-security-myths/308.aspx <h5>By Margaret Dawson</h5> <p>The &ldquo;cloud&rdquo; is one of the most discussed topics among IT professionals today, and organizations are increasingly exploring the potential benefits of using cloud computing or solutions for their businesses. It&rsquo;s no surprise <a href="http://www.gartner ... Wed, 30 Mar 2011 20:06:45 GMT http://www.infosecurity-magazine.com/blog/2011/3/30/debunking-the-top-three-cloud-security-myths/308.aspx [How to] Be Confident When Storing Information in the Cloud http://www.infosecurity-magazine.com/blog/2011/3/29/how-to-be-confident-when-storing-information-in-the-cloud/306.aspx <h5>By Anil Chakravarthy and Deepak Mohan</h5> <p>Over the past few years, information explosion has inhibited organizations&rsquo; ability to effectively secure, manage and recover data. This complexity is only increasing as organizations try to manage the data growth by moving it to the cloud. It ... Tue, 29 Mar 2011 20:16:16 GMT http://www.infosecurity-magazine.com/blog/2011/3/29/how-to-be-confident-when-storing-information-in-the-cloud/306.aspx Revisiting Data Privacy Day http://www.infosecurity-magazine.com/blog/2011/3/28/revisiting-data-privacy-day/305.aspx <p>We regret that we did not have space to publish this in our upcoming print edition, but we here at <em>Infosecurity</em> nonetheless thought it was important to provide our readers with this feedback we received recently on one of our web news items. Since it is in reference to an online item, we ... Mon, 28 Mar 2011 17:53:29 GMT http://www.infosecurity-magazine.com/blog/2011/3/28/revisiting-data-privacy-day/305.aspx Data Sinks and Data Leakage – The Effect of Poisoned Links http://www.infosecurity-magazine.com/blog/2011/3/25/data-sinks-and-data-leakage--the-effect-of-poisoned-links/304.aspx <p>&nbsp;</p> <div>Gone are the days of text user interfaces for exchanging data or email over the Internet. Now, users are hard pressed to exchange information without using HTML or any of the Web 2.0 features. When the WWW was in its infancy, our ability to share and download information propelle ... Fri, 25 Mar 2011 21:22:44 GMT http://www.infosecurity-magazine.com/blog/2011/3/25/data-sinks-and-data-leakage--the-effect-of-poisoned-links/304.aspx WPA2 Secured Hotspots: Feasible with New WiFi Alliance Hotspot Certification http://www.infosecurity-magazine.com/blog/2011/3/23/wpa2-secured-hotspots-feasible-with-new-wifi-alliance-hotspot-certification/303.aspx <p>Public WiFi hotspots have shown tremendous growth in recent years. Much of this can be attributed to growing number of people carrying smart mobile devices (such as smartphones and tablets) and using bandwidth-consuming internet applications (such as gaming, social networking sites and audio/vide ... Wed, 23 Mar 2011 14:50:06 GMT http://www.infosecurity-magazine.com/blog/2011/3/23/wpa2-secured-hotspots-feasible-with-new-wifi-alliance-hotspot-certification/303.aspx Hey, You, Get off of My Cloud http://www.infosecurity-magazine.com/blog/2011/3/22/hey-you-get-off-of-my-cloud/302.aspx <h5>By Allen Allison</h5> <div>The emerging Public Cloud versus Private Cloud debate is not just about which solution is best. It extends to the very definition of cloud.&nbsp;I won&rsquo;t pretend that my definitions of public cloud and private cloud match everybody elses, but I would like to begi ... Tue, 22 Mar 2011 18:08:00 GMT http://www.infosecurity-magazine.com/blog/2011/3/22/hey-you-get-off-of-my-cloud/302.aspx Three Cloud-Computing Data Security Risks That Can’t be Overlooked http://www.infosecurity-magazine.com/blog/2011/3/21/three-cloudcomputing-data-security-risks-that-cant-be-overlooked/301.aspx <h5>&nbsp;By&nbsp;Slavik Markovich<b><br /> </b></h5> <div>The move to cloud computing brings with it a number of attributes that require special consideration when it comes to securing data.&nbsp;And since in nearly every organization, their most sensitive data will be stored either directly in a ... Mon, 21 Mar 2011 16:12:28 GMT http://www.infosecurity-magazine.com/blog/2011/3/21/three-cloudcomputing-data-security-risks-that-cant-be-overlooked/301.aspx WiFi Hacking not Always a Cyber Crime http://www.infosecurity-magazine.com/blog/2011/3/19/wifi-hacking-not-always-a-cyber-crime/299.aspx <p>If someone is assuming that hacking/breaking into a WiFi router for piggybacking on the router&rsquo;s internet connection is illegal, then he/she needs to double check the same with the applicable CyberLaw. This was highlighted in view of a <a href="http://www.pcworld.com/article/222589/dutch_co ... Sat, 19 Mar 2011 11:09:45 GMT http://www.infosecurity-magazine.com/blog/2011/3/19/wifi-hacking-not-always-a-cyber-crime/299.aspx WiFi Security Still Elusive for Many Users http://www.infosecurity-magazine.com/blog/2011/3/18/wifi-security-still-elusive-for-many-users/298.aspx <p>&nbsp;</p> <div>WiFi security continues to hog the limelight with the <a href="http://www.infosecurity-us.com/blog/2010/12/28/summarizing-wifi-security-revelations-for-the-year-2010/262.aspx">series of related revelations and incidents</a> happening periodically. And the latest in this series ar ... Fri, 18 Mar 2011 15:21:43 GMT http://www.infosecurity-magazine.com/blog/2011/3/18/wifi-security-still-elusive-for-many-users/298.aspx Does a High-Performance Cloud Make For More Work? http://www.infosecurity-magazine.com/blog/2011/3/11/does-a-highperformance-cloud-make-for-more-work/295.aspx <p>A couple of quick thoughts here, mostly around the changing scale of the task of securing information in the cloud.</p> <p>I think we see a couple of interesting trends here and they are, well, not necessarily complementary. The first is that the cloud providers are getting serious about scaling ... Fri, 11 Mar 2011 21:05:13 GMT http://www.infosecurity-magazine.com/blog/2011/3/11/does-a-highperformance-cloud-make-for-more-work/295.aspx SEC and the Porn Farm http://www.infosecurity-magazine.com/blog/2011/3/10/sec-and-the-porn-farm/294.aspx <p>&nbsp;</p> <div>Thirty-three people at the SEC were found to have been looking at porn at work over the past five years according the a summary of internal probes conducted by the SEC&rsquo;s inspector general and reported by the <a href="http://online.wsj.com/article/SB1000142405274870438830457 ... Thu, 10 Mar 2011 20:59:22 GMT http://www.infosecurity-magazine.com/blog/2011/3/10/sec-and-the-porn-farm/294.aspx Cloud Security: The Identity Factor http://www.infosecurity-magazine.com/blog/2011/3/10/cloud-security-the-identity-factor/293.aspx <h5>By Patrick Harding</h5> <h3>The Problem with Passwords</h3> <p>The average enterprise employee uses 12 userid/password pairs for accessing the many applications required to perform his or her job (Osterman Research 2009). It is unreasonable to expect anyone to create, regularly change (also a ... Thu, 10 Mar 2011 15:34:41 GMT http://www.infosecurity-magazine.com/blog/2011/3/10/cloud-security-the-identity-factor/293.aspx Navigating Cloud Application Security: Myths vs. Realities http://www.infosecurity-magazine.com/blog/2011/3/8/navigating-cloud-application-security-myths-vs-realities-/290.aspx <h5>By Chris Wysopal</h5> <p>Developers and IT departments are being told they need to move applications to the cloud and are often left on their own to navigate the challenges related to developing and managing the security of applications in those environments. Because no one should have to fly ... Tue, 08 Mar 2011 16:14:07 GMT http://www.infosecurity-magazine.com/blog/2011/3/8/navigating-cloud-application-security-myths-vs-realities-/290.aspx Keeping Control in the Cloud http://www.infosecurity-magazine.com/blog/2011/3/4/keeping-control-in-the-cloud/287.aspx <p>I had a great talk with <a href="http://www.infosecurity-us.com/view/16323/risks-discourage-firms-from-taking-advantage-of-cloud-benefits-/">Fred Donovan </a>this week regarding cloud security.</p> <p>It's pretty clear that organizations of all kinds are very concerned about the risks (and the c ... Fri, 04 Mar 2011 21:58:06 GMT http://www.infosecurity-magazine.com/blog/2011/3/4/keeping-control-in-the-cloud/287.aspx Trusted Client to Cloud Access http://www.infosecurity-magazine.com/blog/2011/3/2/trusted-client-to-cloud-access/286.aspx <h5>By Vikas Jain</h5> <p><a href="http://en.wikipedia.org/wiki/Cloud_computing"><span style="text-decoration: underline;">C</span>loud computing</a> has become an integral part of all IT decision making today across industries and geographies. This market is growing at a rapid pace. By 2014, IDC e ... Wed, 02 Mar 2011 17:10:28 GMT http://www.infosecurity-magazine.com/blog/2011/3/2/trusted-client-to-cloud-access/286.aspx Aligning Security with the Business http://www.infosecurity-magazine.com/blog/2011/3/1/aligning-security-with-the-business/285.aspx <p>Do you know the feeling? You should share a large file with somebody outside your organization. The file is too big to be sent by e-mail. What can you do? Well, you might have a service by internal IT (we have one) that is not really user-friendly, hard to use and &ndash; as you do not need it to ... Tue, 01 Mar 2011 16:41:16 GMT http://www.infosecurity-magazine.com/blog/2011/3/1/aligning-security-with-the-business/285.aspx Senator Schumer Calls for Increased Public WiFi Security http://www.infosecurity-magazine.com/blog/2011/2/28/senator-schumer-calls-for-increased-public-wifi-security/284.aspx <p>&nbsp;</p> <div style="text-align: left;">Increased use of public WiFi access at hotspots, retail stores, hotels and other similar establishments has recently motivated <a href="http://uk.reuters.com/article/2011/02/27/tech-us-schumer-wifi-idUKTRE71Q2N420110227">New York Democrat, Sen. Charles S ... Mon, 28 Feb 2011 13:51:22 GMT http://www.infosecurity-magazine.com/blog/2011/2/28/senator-schumer-calls-for-increased-public-wifi-security/284.aspx And the Thunder Rolls: All the Noise about Cloud and What that Means When Lightning Strikes http://www.infosecurity-magazine.com/blog/2011/2/23/and-the-thunder-rolls-all-the-noise-about-cloud-and-what-that-means-when-lightning-strikes/283.aspx <h5>By Allen Allison</h5> <p>Disaster Recovery (DR) and Business Continuity Planning (BCP) continue to be driving factors for some organizations looking to move to the cloud. Many are looking to manage their Disaster Recovery planning through extensive use of managed cloud services &ndash; and for ... Wed, 23 Feb 2011 16:35:20 GMT http://www.infosecurity-magazine.com/blog/2011/2/23/and-the-thunder-rolls-all-the-noise-about-cloud-and-what-that-means-when-lightning-strikes/283.aspx Top Six Security Questions Every CIO Should Ask a Cloud Vendor http://www.infosecurity-magazine.com/blog/2011/2/23/top-six-security-questions-every-cio-should-ask-a-cloud-vendor-/282.aspx <h5><span style="color: black;">By </span>Ian Huynh</h5> <div><span style="color: black;">Cloud computing has become an integrated part of IT strategy for companies in every sector of our economy.&nbsp;By 2012, IDC predicts that IT spending on cloud services will grow almost threefold, to $42 billi ... Wed, 23 Feb 2011 16:18:16 GMT http://www.infosecurity-magazine.com/blog/2011/2/23/top-six-security-questions-every-cio-should-ask-a-cloud-vendor-/282.aspx Cloud, here we come! http://www.infosecurity-magazine.com/blog/2011/2/11/cloud-here-we-come/281.aspx <p>Cloud, here we come!&nbsp; Or is it rather more a case of &quot;We're already here, so make the best of it...&quot;?</p> <p>I spent some time today talking to a good friend of mine who also happens to be the head of security for a large European financial services business. Unsurprisingly we got ... Fri, 11 Feb 2011 23:22:51 GMT http://www.infosecurity-magazine.com/blog/2011/2/11/cloud-here-we-come/281.aspx Quit Worrying About Cloud Security? http://www.infosecurity-magazine.com/blog/2011/2/4/quit-worrying-about-cloud-security/278.aspx <p>Well, it is not THAT easy but at least there are people starting to claim that it is not as hard as it seems to be sometimes. I stumbled across the following article: <a target="_blank" href="http://fcw.com/articles/2011/01/31/cloud-security.aspx?s=security_030211&amp;admgarea=TC_SECCYBERSEC"><st ... Fri, 04 Feb 2011 11:03:05 GMT http://www.infosecurity-magazine.com/blog/2011/2/4/quit-worrying-about-cloud-security/278.aspx Buying the Security Farm http://www.infosecurity-magazine.com/blog/2011/2/2/buying-the-security-farm/277.aspx <p>The landscape of <a href="http://www.esoft.com/">network security</a> is a world of transition. However, one thing we know for certain is that the threats are becoming more organized, more advanced, and more focused on obtaining one thing: information the attacker can sell. </p> <p>What do t ... Wed, 02 Feb 2011 22:52:44 GMT http://www.infosecurity-magazine.com/blog/2011/2/2/buying-the-security-farm/277.aspx Extend the Enterprise into the Cloud with Single Sign-On to Cloud-Based Services http://www.infosecurity-magazine.com/blog/2011/2/1/extend-the-enterprise-into-the-cloud-with-single-signon-to-cloudbased-services/276.aspx <p>&nbsp;<b>By Mark O&rsquo;Neill</b></p> <p>In this blog post we examine how Single Sign-On from the enterprise to Cloud-based services is enabled. Single Sign-On is a critical component for any organization wishing to leverage Cloud services. In fact, an organization accessing Cloud-based service ... Tue, 01 Feb 2011 16:18:59 GMT http://www.infosecurity-magazine.com/blog/2011/2/1/extend-the-enterprise-into-the-cloud-with-single-signon-to-cloudbased-services/276.aspx Dining in the Cloud http://www.infosecurity-magazine.com/blog/2011/1/28/dining-in-the-cloud/274.aspx <p>I enjoyed <a href="http://www.infosecurity-us.com/blog/2011/1/19/will-the-cloud-cause-the-reemergence-of-security-silos/266.aspx">Matthew Gardener's blog </a>this week on the potential for the re-emergence of security silos as a result of the growing move out into the cloud. I think he's right, o ... Fri, 28 Jan 2011 15:08:30 GMT http://www.infosecurity-magazine.com/blog/2011/1/28/dining-in-the-cloud/274.aspx Are You Focused On The Wrong Security Risks? http://www.infosecurity-magazine.com/blog/2011/1/28/are-you-focused-on-the-wrong-security-risks/273.aspx <p>There is an good article on CIO Central: <a target="_blank" href="http://blogs.forbes.com/ciocentral/2011/01/27/are-you-focused-on-the-wrong-security-risks/">Are You Focused On The Wrong Security Risks?</a></p> <p>An interesting discussion, and I partly agree that we have to challenge the way w ... Fri, 28 Jan 2011 09:34:49 GMT http://www.infosecurity-magazine.com/blog/2011/1/28/are-you-focused-on-the-wrong-security-risks/273.aspx Building a Secure Future in the Cloud http://www.infosecurity-magazine.com/blog/2011/1/27/building-a-secure-future-in-the-cloud/271.aspx <h5>By Mark Bregman</h5> <p>Cloud computing offers clear and powerful benefits to IT organizations of all sizes, but the path to cloud computing &ndash; please excuse the pun &ndash; is often cloudy.</p> <p>With cloud computing, IT resources can scale almost immediately in response to business nee ... Thu, 27 Jan 2011 16:33:40 GMT http://www.infosecurity-magazine.com/blog/2011/1/27/building-a-secure-future-in-the-cloud/271.aspx Moving to the Cloud? Take Your Application Security With You http://www.infosecurity-magazine.com/blog/2011/1/27/moving-to-the-cloud-take-your-application-security-with-you/270.aspx <h5>By Bill Pennington</h5> <p>Cloud computing is becoming a fundamental part of information technology. Nearly every enterprise is evaluating or deploying cloud solutions. Even as business managers turn to the cloud to reduce costs, streamline staff, and increase efficiencies, they remain wary abo ... Thu, 27 Jan 2011 16:20:26 GMT http://www.infosecurity-magazine.com/blog/2011/1/27/moving-to-the-cloud-take-your-application-security-with-you/270.aspx Moving to a “Show Me” State – Gaining Control and Visibility in Cloud Services http://www.infosecurity-magazine.com/blog/2011/1/25/moving-to-a-show-me-state--gaining-control-and-visibility-in-cloud-services/268.aspx <h5>By Eric Baize</h5> <p><a href="http://www.emc.com/collateral/analyst-reports/emc-seeding-the-cloud-forbes-report.pdf">In Survey </a>after <a href="http://securecloudreview.com/2010/09/cloud-adoption-still-struggles-with-security-issues-in-cso-survey/">survey</a>, security and more specifically ... Tue, 25 Jan 2011 16:29:06 GMT http://www.infosecurity-magazine.com/blog/2011/1/25/moving-to-a-show-me-state--gaining-control-and-visibility-in-cloud-services/268.aspx Neuroprivilogy: The New Frontier of Cyber Crime http://www.infosecurity-magazine.com/blog/2011/1/21/neuroprivilogy-the-new-frontier-of-cyber-crime-/267.aspx <h5>By Shlomi Dinoor</h5> <p>Is your Neuroprivilogy vulnerable? The answer is most probably yes, you simply have no clue what Neuroprivilogy is (yet)&hellip;</p> <p>The first step of this discussion is defining a fancy term to help educate and describe this new phenomenon. As the name suggests, N ... Fri, 21 Jan 2011 14:12:24 GMT http://www.infosecurity-magazine.com/blog/2011/1/21/neuroprivilogy-the-new-frontier-of-cyber-crime-/267.aspx Will the Cloud Cause the Reemergence of Security Silos? http://www.infosecurity-magazine.com/blog/2011/1/19/will-the-cloud-cause-the-reemergence-of-security-silos/266.aspx <h5>By Matthew Gardiner</h5> <p>Generally speaking, in the world silos relate to things that are beneficial, such as silos for grain or corn. In the world of IT security, however, silos are very bad. In many forensic investigations, application silos turn up as a key culprit that enabled data leaka ... Wed, 19 Jan 2011 18:07:10 GMT http://www.infosecurity-magazine.com/blog/2011/1/19/will-the-cloud-cause-the-reemergence-of-security-silos/266.aspx UNODC: Open Ended Expert Group on Cybercrime http://www.infosecurity-magazine.com/blog/2011/1/16/unodc-open-ended-expert-group-on-cybercrime/265.aspx <p>From tomorrow on, UNDOC invited for an <a target="_blank" href="http://www.unodc.org/unodc/en/treaties/expert-group-on-cybercrime.html" onclick="javascript:_gaq.push(['_trackEvent','outbound-article','www.unodc.org']);"><strong><font color="#365da0">Open Ended Expert Group on Cybercrime</font></s ... Sun, 16 Jan 2011 21:43:06 GMT http://www.infosecurity-magazine.com/blog/2011/1/16/unodc-open-ended-expert-group-on-cybercrime/265.aspx Certifiable in the Cloud http://www.infosecurity-magazine.com/blog/2011/1/13/certifiable-in-the-cloud/264.aspx <h5>By Pamela Fusco</h5> <div><span style="">Cloud computing remains as much a mystery to some as it is a part of others&rsquo; daily lexicon. I spend a lot of time working with people who have connections to various offices of the US government and I find that regardless of the topic, or the backg ... Thu, 13 Jan 2011 18:35:52 GMT http://www.infosecurity-magazine.com/blog/2011/1/13/certifiable-in-the-cloud/264.aspx Cybercrime as a Service – Our Future? http://www.infosecurity-magazine.com/blog/2011/1/12/cybercrime-as-a-service--our-future/263.aspx <p>It is not really surprising that criminals will leverage the economy of Cloud Computing for their illegal purposes. Especially activities that consume a lot of processor power will be moved to the Cloud &ndash; like any other business.</p> <p>Some way back, there were discussions on how to lever ... Wed, 12 Jan 2011 09:05:58 GMT http://www.infosecurity-magazine.com/blog/2011/1/12/cybercrime-as-a-service--our-future/263.aspx Summarizing WiFi security revelations for the year 2010 http://www.infosecurity-magazine.com/blog/2010/12/28/summarizing-wifi-security-revelations-for-the-year-2010/262.aspx <p>WiFi security remained in focus with noticeable and widely discussed <a href="http://blog.airtightnetworks.com/wi-fi-insecurity-wrap-up-for-2010/">incidents and revelations</a> happening all throughout the year. These events will surely provide strong testimony for advocating the importance of se ... Tue, 28 Dec 2010 14:39:45 GMT http://www.infosecurity-magazine.com/blog/2010/12/28/summarizing-wifi-security-revelations-for-the-year-2010/262.aspx Insider attack, staplers, and something cloudy http://www.infosecurity-magazine.com/blog/2010/12/22/insider-attack-staplers-and-something-cloudy/261.aspx <p>This piece in <a href="http://www.infosecurity-us.com/view/14815/inadvertent-data-disclosure-by-employees-poses-growing-risk/">InfoSecurity&nbsp;</a>reminded me of a recent webinar I did with Jake Kouns of the Open Security Foundation.&nbsp; (An <a href="http://www.credant.com/news-a-events/event ... Wed, 22 Dec 2010 21:56:07 GMT http://www.infosecurity-magazine.com/blog/2010/12/22/insider-attack-staplers-and-something-cloudy/261.aspx Mitigating the use of Local Admin http://www.infosecurity-magazine.com/blog/2010/12/5/mitigating-the-use-of-local-admin/258.aspx <p>We recently had internal discussions on the use of local admin and how to mitigate it. During this, Richard Diver, a Premier Field Engineer in APAC, wrote a great article how to do it. I wanted to make sure you can all see this as well. So, this is a guest blog.</p> <hr /> <p><strong><em>Genera ... Sun, 05 Dec 2010 21:22:15 GMT http://www.infosecurity-magazine.com/blog/2010/12/5/mitigating-the-use-of-local-admin/258.aspx Wikileakage http://www.infosecurity-magazine.com/blog/2010/12/2/wikileakage/257.aspx <p>In all the furor (or possibly storm-in-a-teacup) over the recent WikiLeaks revelations it's interesting, but probably not that surprising, that so much emphasis has been put on the content and far less, at least publicly, on the event itself; by which I mean the actual leak.</p> <p>Based on the ... Thu, 02 Dec 2010 14:32:34 GMT http://www.infosecurity-magazine.com/blog/2010/12/2/wikileakage/257.aspx The Cloud is Also Green http://www.infosecurity-magazine.com/blog/2010/11/22/the-cloud-is-also-green/254.aspx <p>Yes, not only gray :-)</p> <p>Seriously, we commissioned a study to see what the impact of cloud computing is not only to efficiency but the the environment. Can you save CO<sub>2</sub> by moving to the cloud? I think its something we do not look at often enough. As pictures say more than 1000 w ... Mon, 22 Nov 2010 07:35:25 GMT http://www.infosecurity-magazine.com/blog/2010/11/22/the-cloud-is-also-green/254.aspx Password Security Goes Prime Time http://www.infosecurity-magazine.com/blog/2010/11/19/password-security-goes-prime-time-/253.aspx <p>Here's an end-of-week musing for you all. Did anyone happen to see last night&rsquo;s episode of <em>The Office</em>? (Yes, I watch television, and I&rsquo;m not afraid to admit it!)</p> <p>If you did, then the intro illustrated one of the most common security faux-pas out there. In the opening ... Fri, 19 Nov 2010 21:09:30 GMT http://www.infosecurity-magazine.com/blog/2010/11/19/password-security-goes-prime-time-/253.aspx Firesheep Add-on: Exploiting Security Vulnerabilities of Websites over Insecure WiFi Networks http://www.infosecurity-magazine.com/blog/2010/11/16/firesheep-addon--exploiting-security-vulnerabilities-of-websites-over-insecure-wifi-networks/251.aspx <p>&nbsp;<i><a href="http://codebutler.github.com/firesheep/">Firesheep</a></i> is a recently released Firefox add-on/extension, developed by software freelancer <a href="http://codebutler.com/">Eric Butler</a>. The intention behind the add-on was to expose the gravity of commonly found security vul ... Tue, 16 Nov 2010 14:41:23 GMT http://www.infosecurity-magazine.com/blog/2010/11/16/firesheep-addon--exploiting-security-vulnerabilities-of-websites-over-insecure-wifi-networks/251.aspx Fixing Risk Management http://www.infosecurity-magazine.com/blog/2010/11/15/fixing-risk-management/248.aspx <p>I am not satisfied with the way we (in the industry) are doing risk management. In my early days, before I was actually entering the security space, I was doing project management and as part of it, risk management. The way we did it was fairly simple (as probably most of you do): We had an impac ... Mon, 15 Nov 2010 07:22:25 GMT http://www.infosecurity-magazine.com/blog/2010/11/15/fixing-risk-management/248.aspx Cyber attacks, power grids, and Mary Poppins http://www.infosecurity-magazine.com/blog/2010/11/12/cyber-attacks-power-grids-and-mary-poppins/247.aspx <p>&quot;A spoonful of sugar helps the medicine go down..&quot;</p> <p>Or at least, that's what Mary Poppins says.&nbsp; Personally, I have my doubts about her training as a medical professional&nbsp;&ndash; anyone who talks to their umbrella really shouldn't be prescribing drugs to minors if you a ... Fri, 12 Nov 2010 17:16:57 GMT http://www.infosecurity-magazine.com/blog/2010/11/12/cyber-attacks-power-grids-and-mary-poppins/247.aspx The Value of Government Clouds http://www.infosecurity-magazine.com/blog/2010/11/12/the-value-of-government-clouds/246.aspx <p>Microsoft recently released a paper called <a href="http://microsoft.eu/Cloudeconomics.aspx"><font color="#669966">The Economics of Cloud Computing for the EU Public Sector</font></a>, which is actually valid for every other European country as well, as it is not too narrowly focused on the EU on ... Fri, 12 Nov 2010 12:01:42 GMT http://www.infosecurity-magazine.com/blog/2010/11/12/the-value-of-government-clouds/246.aspx Turkey signed Cybercrime Convention http://www.infosecurity-magazine.com/blog/2010/11/11/turkey-signed-cybercrime-convention/245.aspx <p>We are huge supporter of the Convention on Cybercrime by the <a onclick="javascript:_gaq.push(['_trackEvent','outbound-article','www.coe.int']);" href="http://www.coe.int/t/DGHL/cooperation/economiccrime/cybercrime/default_en.asp"><strong><font color="#365da0">Council of Europe</font></strong></a ... Thu, 11 Nov 2010 16:43:09 GMT http://www.infosecurity-magazine.com/blog/2010/11/11/turkey-signed-cybercrime-convention/245.aspx Russia to revise Cybercrime Legislation? http://www.infosecurity-magazine.com/blog/2010/11/5/russia-to-revise-cybercrime-legislation/243.aspx <p>You know that I am propagating the adoption of cybercrime legislation, which is aligned across the Globe. Something, which is absolutely necessary if we want to fight Cybercrime. Basically we are asking governments to consider the Cybercrime Convention (also known as Budapest Convention) by the C ... Fri, 05 Nov 2010 08:19:31 GMT http://www.infosecurity-magazine.com/blog/2010/11/5/russia-to-revise-cybercrime-legislation/243.aspx Bad Week For USB Security http://www.infosecurity-magazine.com/blog/2010/10/22/bad-week-for-usb-security/234.aspx <p>It's been a bad week for USB device security.</p> <p>A couple of potentially ugly breaches have highlighted, once more, the trouble organizations are having with managing removable media security.&nbsp; Over in the UK, the <a href="http://www.sellafieldsites.com/">Sellafield </a>nuclear reproces ... Fri, 22 Oct 2010 19:13:14 GMT http://www.infosecurity-magazine.com/blog/2010/10/22/bad-week-for-usb-security/234.aspx Stuxnet talks – do we listen? http://www.infosecurity-magazine.com/blog/2010/10/12/stuxnet-talks--do-we-listen/232.aspx <p><a href="http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Win32%2fStuxnet"><strong><font color="#365da0">Stuxnet</font></strong></a> is a severe threat &ndash; that&rsquo;s something we know for sure. But if we look at it, &nbsp;what do we really know? What can we lear ... Tue, 12 Oct 2010 15:47:57 GMT http://www.infosecurity-magazine.com/blog/2010/10/12/stuxnet-talks--do-we-listen/232.aspx PCI and Breach Data http://www.infosecurity-magazine.com/blog/2010/10/11/pci-and-breach-data/231.aspx <p>Last week the Verizon Risk Team released an <a href="http://securityblog.verizonbusiness.com/">interesting report&nbsp;</a>in which, among other things, they compared breach result information against norms for PCI DSS compliance.&nbsp;I can't imagine anyone is really all that surprised to see th ... Mon, 11 Oct 2010 22:28:01 GMT http://www.infosecurity-magazine.com/blog/2010/10/11/pci-and-breach-data/231.aspx Practicing Continuous PCI DSS Compliance http://www.infosecurity-magazine.com/blog/2010/10/7/practicing-continuous-pci-dss-compliance/229.aspx <p>&nbsp;</p> <div>The importance of ongoing/continuous PCI DSS compliance processes as an effective means to curb security breaches at a merchant&rsquo;s site is being touted by many experts in the PCI field lately. <a href="http://www.verizonbusiness.com/about/news/pr-25614-en-First+of+its+Kind+V ... Thu, 07 Oct 2010 13:53:56 GMT http://www.infosecurity-magazine.com/blog/2010/10/7/practicing-continuous-pci-dss-compliance/229.aspx The Power of Security Education http://www.infosecurity-magazine.com/blog/2010/10/6/the-power-of-security-education/224.aspx <p>While doing research for an upcoming feature on insider threats, I had a conversation with Nick Levay, information security and operations manager at the <a href="http://www.americanprogress.org/">Center for American Progress</a> (CAP), a DC-based think tank. Although some of what he shared could ... Wed, 06 Oct 2010 17:47:03 GMT http://www.infosecurity-magazine.com/blog/2010/10/6/the-power-of-security-education/224.aspx Path to PCI DSS Compliance: High Incidence of WiFi Vulnerabilities http://www.infosecurity-magazine.com/blog/2010/10/4/path-to-pci-dss-compliance-high-incidence-of-wifi-vulnerabilities-/223.aspx <p>&nbsp;</p> <div>The Deadline to comply with PCI DSS requirements, set for Level 1 Merchants by VISA, recently passed on Sept. 30,&nbsp;2010. However,&nbsp;what we do not yet know is&nbsp;how many of these merchants have successfully met the compliance requirements.</div> <div>&nbsp;</div> <div ... Mon, 04 Oct 2010 13:51:14 GMT http://www.infosecurity-magazine.com/blog/2010/10/4/path-to-pci-dss-compliance-high-incidence-of-wifi-vulnerabilities-/223.aspx WiFi consumerization raising security concerns http://www.infosecurity-magazine.com/blog/2010/9/29/wifi-consumerization-raising-security-concerns/221.aspx <p>&nbsp;</p> <div>The growing WiFi capability in the variety of consumer devices is readily evident nowadays. These devices include cameras, camcorders, printers, scanners, smartphones, televisions, music/video players, e-book readers and many more. Having been equipped with WiFi capability, these ... Wed, 29 Sep 2010 12:37:18 GMT http://www.infosecurity-magazine.com/blog/2010/9/29/wifi-consumerization-raising-security-concerns/221.aspx Customer Experience: Security Can Improve in the Cloud http://www.infosecurity-magazine.com/blog/2010/9/28/customer-experience-security-can-improve-in-the-cloud/220.aspx <p>Last week, when I was in South Africa, a partner of us pointed me to a very interesting paper by KPMG called <a target="_blank" href="http://www.kpmg.com/AU/en/IssuesAndInsights/ArticlesPublications/Pages/Cloud-computing-Australian-lessons-and-experiences.aspx" onclick="javascript:_gaq.push(['_tr ... Tue, 28 Sep 2010 15:03:37 GMT http://www.infosecurity-magazine.com/blog/2010/9/28/customer-experience-security-can-improve-in-the-cloud/220.aspx Bigger than the Cloud? http://www.infosecurity-magazine.com/blog/2010/9/23/bigger-than-the-cloud/218.aspx <p>Laura Smith over at <a href="http://:http://searchcio.techtarget.com/news/2240022577/Mobile-phone-security-policies-give-IT-some-control-over-the-influx">SearchCIO&nbsp;</a> recently covered the explosive growth of the iPhone and other smartphones in the business sector, and how that growth is re ... Thu, 23 Sep 2010 22:16:38 GMT http://www.infosecurity-magazine.com/blog/2010/9/23/bigger-than-the-cloud/218.aspx The Risks of Unofficial Patches http://www.infosecurity-magazine.com/blog/2010/9/17/the-risks-of-unofficial-patches/215.aspx <p>This is quite a normal scenario: A zero-day pops up on the Internet by a security researcher. Immediately afterwards we see the first exploits appearing and being integrated into the different attack tools. Now, the race has started: The vendor has to develop a security update, the criminals try ... Fri, 17 Sep 2010 09:09:42 GMT http://www.infosecurity-magazine.com/blog/2010/9/17/the-risks-of-unofficial-patches/215.aspx One-sided Explosion http://www.infosecurity-magazine.com/blog/2010/9/9/onesided-explosion/207.aspx <p>Consumerization&nbsp;&ndash; the use of consumer products within the corporate environment, is one of the more challenging issues for security teams to deal with. While a standard, well-defined, and well-protected infrastrucutre is a nice idea, there is more and more pressure to open up the netwo ... Thu, 09 Sep 2010 20:43:08 GMT http://www.infosecurity-magazine.com/blog/2010/9/9/onesided-explosion/207.aspx PCI, AV and a life vest http://www.infosecurity-magazine.com/blog/2010/8/25/pci-av-and-a-life-vest/201.aspx <p>A good friend of mine over at <a href="http://www.netiq.com">NetIQ</a>, Todd Tucker, recently <a href="http://community.netiq.com/blogs/security_webb/archive/2010/08/23/reliance-on-antivirus-software-the-real-failure-of-pci-dss.aspx">blogged</a>&nbsp;about some of the frustrations he sees when lo ... Wed, 25 Aug 2010 14:38:55 GMT http://www.infosecurity-magazine.com/blog/2010/8/25/pci-av-and-a-life-vest/201.aspx The Importance of Application Security http://www.infosecurity-magazine.com/blog/2010/8/24/the-importance-of-application-security/200.aspx <p>I think I told this story thousands of times, and everybody knows it, but I will do it for the 1001<sup><font size="2">st</font></sup> time now. When I joined Microsoft and became what is the Chief Security Advisor for Switzerland today, we had an airlift for Windows Server 2003. The Product Mana ... Tue, 24 Aug 2010 15:53:13 GMT http://www.infosecurity-magazine.com/blog/2010/8/24/the-importance-of-application-security/200.aspx Should RIM hold its line on the BlackBerry? http://www.infosecurity-magazine.com/blog/2010/8/18/should-rim-hold-its-line-on-the-blackberry/198.aspx <p>Encryption is the sort of topic that rarely makes it into the mainstream media, but the recent hoopla over BlackBerry security, namely its encryption procedures, has drawn the ire of governments throughout Asia. </p> <p>India, the UAE, Saudi Arabia &ndash; all have taken issue with BlackBerry se ... Wed, 18 Aug 2010 16:17:35 GMT http://www.infosecurity-magazine.com/blog/2010/8/18/should-rim-hold-its-line-on-the-blackberry/198.aspx Blocking Social Media Sites–a False Sense of Security? http://www.infosecurity-magazine.com/blog/2010/8/14/blocking-social-media-sitesa-false-sense-of-security/196.aspx <p>I blog often about it: Blocking certain websites today can fire back in different ways. The CIO published an article called <a target="_blank" href="http://www.cio.com/article/603054/Workarounds_5_Ways_Employees_Try_to_Access_Restricted_Sites">Workarounds: 5 Ways Employees Try to Access Restricte ... Sat, 14 Aug 2010 18:28:14 GMT http://www.infosecurity-magazine.com/blog/2010/8/14/blocking-social-media-sitesa-false-sense-of-security/196.aspx I-Coverage http://www.infosecurity-magazine.com/blog/2010/8/13/icoverage/195.aspx <p>I wanted to comment a little on the <a href="http://www.infosecurity-us.com/view/11728/apple-pushes-security-updates-for-mobile-devices/">recent stir </a>concerning the vulnerabilities on the iPhone (iPad, iTouch, I-Robot.&nbsp; No, wait, that's a movie.)</p> <p>I think the level of interest in ... Fri, 13 Aug 2010 14:31:46 GMT http://www.infosecurity-magazine.com/blog/2010/8/13/icoverage/195.aspx Adobe CS7 Searches Saturated With Dangerous Results http://www.infosecurity-magazine.com/blog/2010/7/30/adobe-cs7-searches-saturated-with-dangerous-results/192.aspx <p>Looking to save a few bucks on software will almost always lead users down a dangerous path.&nbsp;Users either end up at &ldquo;OEM Software&rdquo; sites offering unlicensed and illegal software, or to downloading cracks or keygens laced with malware.&nbsp; <br /> <br /> One of the big issues h ... Fri, 30 Jul 2010 14:02:34 GMT http://www.infosecurity-magazine.com/blog/2010/7/30/adobe-cs7-searches-saturated-with-dangerous-results/192.aspx Microsoft and Adobe: Collaboration Against Threats http://www.infosecurity-magazine.com/blog/2010/7/28/microsoft-and-adobe-collaboration-against-threats/191.aspx <p>You know my opinion on collaboration between countries, on public-private-partnerships, as well as on collaboration between companies.</p> <p>For&nbsp;quite a while we have been running&nbsp;a program called MAPP &ndash; the <a href="http://www.microsoft.com/security/msrc/collaboration/mapp.aspx ... Wed, 28 Jul 2010 17:39:18 GMT http://www.infosecurity-magazine.com/blog/2010/7/28/microsoft-and-adobe-collaboration-against-threats/191.aspx WPA2 Exposed with 'Hole 196' Vulnerability http://www.infosecurity-magazine.com/blog/2010/7/23/wpa2-exposed-with-hole-196-vulnerability/189.aspx <p>Until now, the WPA security version known as &lsquo;WPA2 (AES encryption) with 802.1x authentication&rsquo;&nbsp;was considered as one of most secure WiFi deployments by most wireless security experts. This is due to the resilience of this version to brute force dictionary attacks that can possib ... Fri, 23 Jul 2010 06:06:41 GMT http://www.infosecurity-magazine.com/blog/2010/7/23/wpa2-exposed-with-hole-196-vulnerability/189.aspx It's all about WHO http://www.infosecurity-magazine.com/blog/2010/7/8/its-all-about-who/186.aspx <blockquote> <p><em>&ldquo;I KEEP six honest serving-men<br /> &nbsp;(They taught me all I knew);<br /> Their names are What and Why and When <br /> &nbsp;And How and Where and Who.&rdquo;</em></p> </blockquote><blockquote> <p><a href="http://www.kipling.org.uk/poems_serving.htm">&ndash; Rudya ... Thu, 08 Jul 2010 21:13:30 GMT http://www.infosecurity-magazine.com/blog/2010/7/8/its-all-about-who/186.aspx Cloud Computing: Benefits and Risks of Moving Federal IT into the Cloud http://www.infosecurity-magazine.com/blog/2010/7/6/cloud-computing-benefits-and-risks-of-moving-federal-it-into-the-cloud/184.aspx <p>July 1st: Scott Charney, Corporate Vice President Trustworthy Computing was testifying at a hearing of the House Committee on Oversight and Government Reform. Basically the hearing was on the benefits and risk of Cloud adoption for the US government. If you are interested in reading his full test ... Tue, 06 Jul 2010 14:17:04 GMT http://www.infosecurity-magazine.com/blog/2010/7/6/cloud-computing-benefits-and-risks-of-moving-federal-it-into-the-cloud/184.aspx Secure WiFi Networks: WiFi Alliance and Legal Authorities Coming Forward http://www.infosecurity-magazine.com/blog/2010/7/5/secure-wifi-networks-wifi-alliance-and-legal-authorities-coming-forward/183.aspx <p>&nbsp;</p> <div>WiFi, today, has become a <a href="http://gigaom.com/2009/08/23/look-how-ubiquitous-wi-fi-has-become/">near ubiquitous technology</a>, used by most of us, with our WiFi enabled gadgets, while we are at offices, homes, public places or while traveling. However, awareness about WiF ... Mon, 05 Jul 2010 08:12:18 GMT http://www.infosecurity-magazine.com/blog/2010/7/5/secure-wifi-networks-wifi-alliance-and-legal-authorities-coming-forward/183.aspx Do Enjoy 'One Click' Free WiFi at Starbucks, but Safeguard Your Privacy http://www.infosecurity-magazine.com/blog/2010/7/1/do-enjoy-one-click-free-wifi-at-starbucks-but-safeguard-your-privacy-/182.aspx <p>Six months after McDonalds started offering free WiFi, Starbucks also announced&nbsp;it would provide&nbsp;complimentary&nbsp;WiFi service, starting July 1, 2010. <a href="http://www.starbucks.com/coffeehouse/wireless-internet">As mentioned by Starbucks</a>, the free WiFi will be unlimited and re ... Thu, 01 Jul 2010 15:43:21 GMT http://www.infosecurity-magazine.com/blog/2010/7/1/do-enjoy-one-click-free-wifi-at-starbucks-but-safeguard-your-privacy-/182.aspx Russian Spies in the US: Corporate Spies Could Follow their Communication Methods http://www.infosecurity-magazine.com/blog/2010/6/30/russian-spies-in-the-us-corporate-spies-could-follow-their-communication-methods/181.aspx <p><a href="http://news.bbc.co.uk/2/hi/world/us_and_canada/10442869.stm">As reported recently</a>, Russian spies in US used private WiFi networks as a means for secret communications. These networks were found to be operating in <a href="http://www.wi-fiplanet.com/tutorials/article.php/1451421/Under ... Wed, 30 Jun 2010 14:05:39 GMT http://www.infosecurity-magazine.com/blog/2010/6/30/russian-spies-in-the-us-corporate-spies-could-follow-their-communication-methods/181.aspx Red Button SEO Poisoning and Malware Campaign http://www.infosecurity-magazine.com/blog/2010/6/30/red-button-seo-poisoning-and-malware-campaign/180.aspx <p>eSoft researchers have been tracking a new campaign by cybercrooks, compromising and creating websites for use in SEO poisoning and malware distribution. Thousands of these sites have been detected&nbsp;that&nbsp;use elaborate techniques to trick search engines and are ready to serve malware in a ... Wed, 30 Jun 2010 02:56:11 GMT http://www.infosecurity-magazine.com/blog/2010/6/30/red-button-seo-poisoning-and-malware-campaign/180.aspx WiFi malfunction at iPhone 4 launch reinforced the need of Wireless Intrusion Detection Systems (WIDS) http://www.infosecurity-magazine.com/blog/2010/6/29/wifi-malfunction-at-iphone-4-launch-reinforced-the-need-of-wireless-intrusion-detection-systems-wids/179.aspx <p><a href="http://futuretense.publicradio.org/blog/index.php?id=677444556">An after look</a> into the cause of WiFi malfunction experienced by Steve Jobs&nbsp;during the&nbsp;recently conducted iPhone 4 launch at Apple's flagship Worldwide Developers Conference (WWDC) has revealed that around 500 m ... Tue, 29 Jun 2010 06:04:54 GMT http://www.infosecurity-magazine.com/blog/2010/6/29/wifi-malfunction-at-iphone-4-launch-reinforced-the-need-of-wireless-intrusion-detection-systems-wids/179.aspx Google’s WiFi Snooping Controversy Is a Wake-up Call to Stop WiFi Malpractices http://www.infosecurity-magazine.com/blog/2010/6/25/googles-wifi-snooping-controversy-is-a-wakeup-call-to-stop-wifi-malpractices/178.aspx <p>The ongoing storm over Google's collection of private WiFi data doesn't seems to be ending anytime soon. It all started when German authorities asked Google to audit the WiFi data collected by Google's Street View cars and Google responded to this by re-examining the collected data. The re-examin ... Fri, 25 Jun 2010 11:33:21 GMT http://www.infosecurity-magazine.com/blog/2010/6/25/googles-wifi-snooping-controversy-is-a-wakeup-call-to-stop-wifi-malpractices/178.aspx Proposed cybersecurity bill: stop calling it a “Kill Switch” http://www.infosecurity-magazine.com/blog/2010/6/22/proposed-cybersecurity-bill-stop-calling-it-a-kill-switch/176.aspx <p>Unless I am mistaken &ndash; and not being a lawyer, this is a distinct possibility &ndash; but the <a href="http://www.infosecurity-us.com/view/10217/senate-introduces-sweeping-cybersecurity-bill/">cybersecurity bill proposed in the senate earlier this month</a> does nothing to create a so-calle ... Tue, 22 Jun 2010 21:23:54 GMT http://www.infosecurity-magazine.com/blog/2010/6/22/proposed-cybersecurity-bill-stop-calling-it-a-kill-switch/176.aspx Raid against Piracy http://www.infosecurity-magazine.com/blog/2010/6/22/raid-against-piracy/175.aspx <p>There seem to be policy organizations&nbsp;that are&nbsp;serious about fighting piracy! Hungary, actually with 41% pirated software &ldquo;not even that bad&rdquo;, seems to be really serious. But first, let me just take those 41% up for a second: This means that 41% of the work you do is stolen. ... Tue, 22 Jun 2010 21:00:29 GMT http://www.infosecurity-magazine.com/blog/2010/6/22/raid-against-piracy/175.aspx Who's On First? http://www.infosecurity-magazine.com/blog/2010/6/18/whos-on-first/174.aspx <p>It&rsquo;s hard not to love Abbott and Costello.</p> <p>The<a href="http://en.wikipedia.org/wiki/Whos_on_first">&ldquo;Who&rsquo;s on first&rdquo;</a> routine has become a staple of Americana even for foreign transplants like me. But if figuring out the identity of who is on second base (no, wai ... Fri, 18 Jun 2010 17:12:17 GMT http://www.infosecurity-magazine.com/blog/2010/6/18/whos-on-first/174.aspx The Importance of International Collaboration –Even in Exercises http://www.infosecurity-magazine.com/blog/2010/6/16/the-importance-of-international-collaboration-even-in-exercises/173.aspx <p>One of the biggest challenges in Critical Infrastructure Protection or Incident Response is collaboration. Collaboration between the public and the private sector as the private sector is most often running the critical infrastructure; collaboration between different governments as well, as incid ... Wed, 16 Jun 2010 02:52:07 GMT http://www.infosecurity-magazine.com/blog/2010/6/16/the-importance-of-international-collaboration-even-in-exercises/173.aspx Should the Government be able to enforce security updates? http://www.infosecurity-magazine.com/blog/2010/6/12/should-the-government-be-able-to-enforce-security-updates/172.aspx <p>This is actually an interesting question. A lot of governments enforce rules and regulations on how you have to run your car, how often you have to check it, in which condition you have to keep your tires, etc. The same is true for a lot of other devices we are using.</p> <p>Now, it seems that t ... Sat, 12 Jun 2010 07:58:27 GMT http://www.infosecurity-magazine.com/blog/2010/6/12/should-the-government-be-able-to-enforce-security-updates/172.aspx Open Source and Hackers http://www.infosecurity-magazine.com/blog/2010/6/8/open-source-and-hackers/170.aspx <p>The debate is probably as old as the Open Source software development model &ndash; Which one is more secure: Open Source or shared source as we at Microsoft run it? I know that we could now enter a religious debate about that, which I do not want to as I do not really believe in the value of suc ... Tue, 08 Jun 2010 12:49:17 GMT http://www.infosecurity-magazine.com/blog/2010/6/8/open-source-and-hackers/170.aspx New Email Phish Targets Twitter Users, Abuses Google Groups http://www.infosecurity-magazine.com/blog/2010/6/8/new-email-phish-targets-twitter-users-abuses-google-groups/169.aspx <p>A new twitter spam campaign is making rounds, infecting users with rogue anti-virus malware. The spam mail attempts to convince the user that someone was trying to steal their Twitter account information, and to download a &ldquo;secure module&rdquo; to protect their account. <br /> <br /> The ... Tue, 08 Jun 2010 01:17:50 GMT http://www.infosecurity-magazine.com/blog/2010/6/8/new-email-phish-targets-twitter-users-abuses-google-groups/169.aspx 135 000 Fake YouTube Pages Delivering Malware http://www.infosecurity-magazine.com/blog/2010/6/7/135-000-fake-youtube-pages-delivering-malware/168.aspx <p>The eSoft Threat Prevention Team has uncovered thousands compromised web servers hosting fake YouTube pages.&nbsp;Attempting to play the video on these fake pages prompts the user to install a &lsquo;media codec&rsquo; which then infects the machine with malware. <br /> <br /> The fake YouTube ... Mon, 07 Jun 2010 20:42:06 GMT http://www.infosecurity-magazine.com/blog/2010/6/7/135-000-fake-youtube-pages-delivering-malware/168.aspx Security, Cloud and a Little Pixie Dust http://www.infosecurity-magazine.com/blog/2010/6/1/security-cloud-and-a-little-pixie-dust/167.aspx <p>When Peter Pan is trying to convince Wendy to fly, he tells her all she needs is &ldquo;Faith, trust, and a little Pixie dust.&rdquo;&nbsp; Which, to be fair, appeared to work for the lost boys.&nbsp; In <a href="http://www.infosecurity-us.com/view/9824/cloud-computing-could-help-improve-security ... Tue, 01 Jun 2010 14:51:56 GMT http://www.infosecurity-magazine.com/blog/2010/6/1/security-cloud-and-a-little-pixie-dust/167.aspx Hacking the human body http://www.infosecurity-magazine.com/blog/2010/5/27/hacking-the-human-body/166.aspx <p>Years ago I was sitting in a healthcare event, when a researcher was talking (very excited) about the idea of having a pacemaker with Bluetooth access to fine-tune the system and read information from the sensors. Even though this might medically be a great idea, I would be fairly reluctant havin ... Thu, 27 May 2010 06:51:51 GMT http://www.infosecurity-magazine.com/blog/2010/5/27/hacking-the-human-body/166.aspx Identity in the Cloud http://www.infosecurity-magazine.com/blog/2010/5/25/identity-in-the-cloud/165.aspx <p>Kim Cameron, one of our key identity architects had an interesting presentation on identity in the cloud and a corresponding interview. Both are worth looking at if you are planning to move into the direction of the cloud. Especially as it is definitely one of the key challenges:</p> <p>This is ... Tue, 25 May 2010 20:57:17 GMT http://www.infosecurity-magazine.com/blog/2010/5/25/identity-in-the-cloud/165.aspx Outsourcing Insider Attack? http://www.infosecurity-magazine.com/blog/2010/5/20/outsourcing-insider-attack/164.aspx <p>I know one or two other bloggers have spotted the following news piece too, notably Bruce Schneier, but it&rsquo;s hard to pass up an opportunity to not only comment, but to draw some wider parallels with other market trends in IT. The <a href="http://news.bbc.co.uk/2/hi/south_asia/8677486.stm">B ... Thu, 20 May 2010 17:34:50 GMT http://www.infosecurity-magazine.com/blog/2010/5/20/outsourcing-insider-attack/164.aspx Customer Stories: Why it is not THAT easy to move to the Cloud http://www.infosecurity-magazine.com/blog/2010/5/19/customer-stories-why-it-is-not-that-easy-to-move-to-the-cloud/162.aspx <p>As you know from my postings on Cloud and security and the paper on the <a href="http://go.microsoft.com/?linkid=9708479" target="_blank"><font color="#669966">Cloud Security Considerations</font></a> we wrote, I am convinced that there are five areas you should look at when you try to migrate to ... Wed, 19 May 2010 10:33:17 GMT http://www.infosecurity-magazine.com/blog/2010/5/19/customer-stories-why-it-is-not-that-easy-to-move-to-the-cloud/162.aspx Phishing Scams Lure Twitter Users http://www.infosecurity-magazine.com/blog/2010/5/14/phishing-scams-lure-twitter-users/161.aspx <p>The newest phishing scam on Twitter has snared thousands of users hoping to increase their number of followers.&nbsp; Instead, users are sent off to a phishing page where cybercriminals steal their Twitter logins using them to generate more spam.<br /> <br /> Thousands of spam messages are floa ... Fri, 14 May 2010 20:05:08 GMT http://www.infosecurity-magazine.com/blog/2010/5/14/phishing-scams-lure-twitter-users/161.aspx HITECH, breaches, and a little sunlight http://www.infosecurity-magazine.com/blog/2010/5/13/hitech-breaches-and-a-little-sunlight/160.aspx <p>A good article in <a href="http://www.infosecurity-us.com/view/9233/">InfoSecurity </a>on May 5th on the <a href="http://www.hhs.gov/ocr/privacy/hipaa/administrative/enforcementrule/hitechenforcementifr.html">HITECH </a>act got me thinking (as good articles should) about health records, security, ... Thu, 13 May 2010 23:06:58 GMT http://www.infosecurity-magazine.com/blog/2010/5/13/hitech-breaches-and-a-little-sunlight/160.aspx Google Groups Latest Hot Spot for Rogue AV and Malware http://www.infosecurity-magazine.com/blog/2010/5/12/google-groups-latest-hot-spot-for-rogue-av-and-malware/159.aspx <p><span class="Apple-style-span" style="word-spacing: 0px; font-family: 'Times New Roman'; font-style: normal; font-variant: normal; font-weight: normal; font-size: medium; line-height: normal; font-size-adjust: none; font-stretch: normal; text-transform: none; color: rgb(0, 0, 0); text-indent: 0px ... Wed, 12 May 2010 19:06:47 GMT http://www.infosecurity-magazine.com/blog/2010/5/12/google-groups-latest-hot-spot-for-rogue-av-and-malware/159.aspx Looking back at Infosecurity Europe 2010 http://www.infosecurity-magazine.com/blog/2010/5/10/looking-back-at-infosecurity-europe-2010/158.aspx <p>Late April was highlighted by my first trip to <a href="http://www.infosec.co.uk/">Infosecurity Europe</a> in London. While I understand that this event received its fair share of criticism in the press for being past its prime, there were certainly aspects of the conference that made it worthwhi ... Mon, 10 May 2010 18:29:35 GMT http://www.infosecurity-magazine.com/blog/2010/5/10/looking-back-at-infosecurity-europe-2010/158.aspx Pharma-Fraud Continues to Dominate Spam http://www.infosecurity-magazine.com/blog/2010/4/22/pharmafraud-continues-to-dominate-spam/156.aspx <p><span class="Apple-style-span" style="word-spacing: 0px; font: medium 'Times New Roman'; text-transform: none; color: rgb(0,0,0); text-indent: 0px; white-space: normal; letter-spacing: normal; border-collapse: separate; orphans: 2; widows: 2"><span class="Apple-style-span" style="font-size: 13px; ... Thu, 22 Apr 2010 18:05:26 GMT http://www.infosecurity-magazine.com/blog/2010/4/22/pharmafraud-continues-to-dominate-spam/156.aspx A Detailed Analysis of an Attack – Do We Need an International Incident Sharing Database? http://www.infosecurity-magazine.com/blog/2010/4/21/a-detailed-analysis-of-an-attack--do-we-need-an-international-incident-sharing-database/155.aspx <p>I recently came across a paper called <a target="_blank" href="http://www.shadows-in-the-cloud.net/"><font color="#669966">Shadows in the Cloud</font></a>, which is actually a follow-up report of <a target="_blank" href="http://www.scribd.com/doc/13731776/Tracking-GhostNet-Investigating-a-Cyber-E ... Wed, 21 Apr 2010 13:51:18 GMT http://www.infosecurity-magazine.com/blog/2010/4/21/a-detailed-analysis-of-an-attack--do-we-need-an-international-incident-sharing-database/155.aspx Tiger Woods (Searches) Not to Be Trusted http://www.infosecurity-magazine.com/blog/2010/4/8/tiger-woods-searches-not-to-be-trusted/153.aspx <p>Tiger Woods&rsquo; personal life and marital affairs have attracted constant attention from the press and has certainly damaged his public reputation.&nbsp; With his return to the Masters, Nike has released a new commercial in an effort to rebuild Woods&rsquo; image.&nbsp; This compelling com ... Thu, 08 Apr 2010 21:32:04 GMT http://www.infosecurity-magazine.com/blog/2010/4/8/tiger-woods-searches-not-to-be-trusted/153.aspx Affiliate Programs Rising Cause of Fraud and Abuse http://www.infosecurity-magazine.com/blog/2010/4/5/affiliate-programs-rising-cause-of-fraud-and-abuse/151.aspx <p>What happens when you offer up money to anyone who can drive traffic to your website?&nbsp;Hackers, scammers, spammers and fraudsters come to your aid.&nbsp;That&rsquo;s the case with online movie site <a href="http://www.zml.com/">zml.com</a>, which offers 30% of each sale and 5% of rebills paid ... Mon, 05 Apr 2010 14:15:03 GMT http://www.infosecurity-magazine.com/blog/2010/4/5/affiliate-programs-rising-cause-of-fraud-and-abuse/151.aspx Council of Europe – Octopus Conference (Cooperation against Cybercrime) – Key Messages http://www.infosecurity-magazine.com/blog/2010/3/26/council-of-europe--octopus-conference-cooperation-against-cybercrime--key-messages/150.aspx <p>I blogged on <a target="_blank" href="http://www.halbheer.info/security/2010/03/23/council-of-europe-octopus-conference-cooperation-against-cybercrime-day-1"><font color="#669966">Day 1</font></a> and <a target="_blank" href="http://www.halbheer.info/security/2010/03/24/council-of-europe-octopus- ... Fri, 26 Mar 2010 20:51:59 GMT http://www.infosecurity-magazine.com/blog/2010/3/26/council-of-europe--octopus-conference-cooperation-against-cybercrime--key-messages/150.aspx Council of Europe – Octopus Conference (Cooperation against Cybercrime) Day 2 http://www.infosecurity-magazine.com/blog/2010/3/24/council-of-europe--octopus-conference-cooperation-against-cybercrime-day-2/149.aspx <p>And the second day starts. I just met with Jeremy Kirk from IDG and it is great to see that the press is actually interested in such a conference as well.</p> <p>The day today started with a long session on different initiatives against cybercrime. A lot of good information:</p> <ul> <li>< ... Wed, 24 Mar 2010 16:12:39 GMT http://www.infosecurity-magazine.com/blog/2010/3/24/council-of-europe--octopus-conference-cooperation-against-cybercrime-day-2/149.aspx Council of Europe: We need ONE Cybercrime Convention http://www.infosecurity-magazine.com/blog/2010/3/24/council-of-europe-we-need-one-cybercrime-convention/148.aspx <p>As you saw from previous posts, I am at the Octopus Conference on Cooperation against Cybercrime at the moment. We had yesterday the Deputy Secretary General of the Council of Europe and one of her key statements was that different bodies (like the Council of Europe, UN etc.) should not compete. ... Wed, 24 Mar 2010 08:31:07 GMT http://www.infosecurity-magazine.com/blog/2010/3/24/council-of-europe-we-need-one-cybercrime-convention/148.aspx Council of Europe – Octopus Conference (Cooperation against Cybercrime) Day 1 http://www.infosecurity-magazine.com/blog/2010/3/23/council-of-europe--octopus-conference-cooperation-against-cybercrime-day-1/147.aspx <p>A few years ago, the Budapest Convention on Cybercrime was signed within the Council of Europe. Since then it was ratified all across the globe by a lot of countries or at least used as the base for legislation. The Council of Europe is organising a conference on <a target="_blank" href="http://w ... Tue, 23 Mar 2010 15:22:27 GMT http://www.infosecurity-magazine.com/blog/2010/3/23/council-of-europe--octopus-conference-cooperation-against-cybercrime-day-1/147.aspx Cinderella Story Leads to March Madness Malware http://www.infosecurity-magazine.com/blog/2010/3/22/cinderella-story-leads-to-march-madness-malware/146.aspx <p>The first week of March Madness has brought about many compelling stories, with a good deal of upsets and bracket busters. The most newsworthy of these has been the University of Northern Iowa&rsquo;s ousting of #1 overall seed Kansas. This &lsquo;Cinderella&rsquo; story has deservedly gotten a g ... Mon, 22 Mar 2010 13:33:18 GMT http://www.infosecurity-magazine.com/blog/2010/3/22/cinderella-story-leads-to-march-madness-malware/146.aspx Results of Operation b49 (Botnet Takedown) http://www.infosecurity-magazine.com/blog/2010/3/20/results-of-operation-b49-botnet-takedown/145.aspx <p>On February 24th we announced the work we did on taking down Waledac &ndash; read Tim Cranton&rsquo;s blog post called <a target="_blank" href="http://microsoftontheissues.com/cs/blogs/mscorp/archive/2010/02/24/cracking-down-on-botnets.aspx"><font color="#669966">Cracking Down on Botnets</font></ ... Sat, 20 Mar 2010 14:06:06 GMT http://www.infosecurity-magazine.com/blog/2010/3/20/results-of-operation-b49-botnet-takedown/145.aspx Strong Authentication and Privacy – A Contradiction in Terms? http://www.infosecurity-magazine.com/blog/2010/3/17/strong-authentication-and-privacy--a-contradiction-in-terms/144.aspx <p style="text-align: left">You know that I am not a big fan of the requirement for having all Internet users authenticate strongly. There are people in the security arena who think that this is the only way to fight cybercrime &ndash; and in parallel accept that they would kill freedom of speech.</ ... Wed, 17 Mar 2010 21:32:49 GMT http://www.infosecurity-magazine.com/blog/2010/3/17/strong-authentication-and-privacy--a-contradiction-in-terms/144.aspx Insider Threat of Cloud Computing http://www.infosecurity-magazine.com/blog/2010/3/11/insider-threat-of-cloud-computing/142.aspx <p>Tonight I got this&nbsp;article forwarded to me: <a target="_blank" href="http://www.infoworld.com/d/cloud-computing/afraid-outside-cloud-attacks-youre-missing-real-threat-894?source=IFWNLE_nlt_daily_2010-03-10"><font color="#669966">Afraid of outside cloud attacks? You're missing the real threat ... Thu, 11 Mar 2010 09:19:54 GMT http://www.infosecurity-magazine.com/blog/2010/3/11/insider-threat-of-cloud-computing/142.aspx Data Protection Heat Map http://www.infosecurity-magazine.com/blog/2010/3/9/data-protection-heat-map/141.aspx <p>I was looking at some research done by Forrester, which could be interesting for you as well. They try to lay out the landscape with regards to data protection for you and it looks fairly compelling. So if you are interested in the situation of the different Privacy laws across the globe and how ... Tue, 09 Mar 2010 20:27:14 GMT http://www.infosecurity-magazine.com/blog/2010/3/9/data-protection-heat-map/141.aspx Why it pays to be secure – Chapter 5 – I need tools! http://www.infosecurity-magazine.com/blog/2010/3/6/why-it-pays-to-be-secure--chapter-5--i-need-tools/140.aspx <p>Our EMEA Security Program Manager, Henk van Roest, started this series internally and with his consent I am publishing it here in my blog as I think it contains a lot of great information for you to use.</p> <hr /> <p>So far, in the first 4 chapters, we have addressed the usual excuses for not ... Sat, 06 Mar 2010 23:25:05 GMT http://www.infosecurity-magazine.com/blog/2010/3/6/why-it-pays-to-be-secure--chapter-5--i-need-tools/140.aspx Virus Alert! Twitter, Google, Hallmark and Others Subject To Attack http://www.infosecurity-magazine.com/blog/2010/3/5/virus-alert-twitter-google-hallmark-and-others-subject-to-attack/139.aspx <p>The eSoft Threat Prevention Team is warning customers today of a new email scam circulating very quickly. &nbsp;These fraudulent emails claim to be from Google Staffing, Hallmark, Twitter as well as other social networks and legitimate businesses.<br /> <br /> The email persuades the user to op ... Fri, 05 Mar 2010 22:12:10 GMT http://www.infosecurity-magazine.com/blog/2010/3/5/virus-alert-twitter-google-hallmark-and-others-subject-to-attack/139.aspx Making the Management of Security Compliance Easier! http://www.infosecurity-magazine.com/blog/2010/2/18/making-the-management-of-security-compliance-easier/138.aspx <p>As you all know, I have two main pet themes: Risk Management and Compliance Management as I see very often that there is room for improvement when it comes to such processes within our customers. Internally, we often think about how we can make it easier for our customers to manage compliance in ... Thu, 18 Feb 2010 19:59:26 GMT http://www.infosecurity-magazine.com/blog/2010/2/18/making-the-management-of-security-compliance-easier/138.aspx SANS Top 25 Most Dangerous Programming Errors – the same as very often… http://www.infosecurity-magazine.com/blog/2010/2/17/sans-top-25-most-dangerous-programming-errors--the-same-as-very-often/137.aspx <p>I just worked my way through the <a target="_blank" href="http://cwe.mitre.org/top25/"><font color="#669966">list SANS published</font></a>. Looking at the list it is not surprising but scary to see which errors made it to the top of the list:</p> <ol> <li>Cross-site Scripting</li> <li ... Wed, 17 Feb 2010 16:42:00 GMT http://www.infosecurity-magazine.com/blog/2010/2/17/sans-top-25-most-dangerous-programming-errors--the-same-as-very-often/137.aspx Hotmail Users Look for Answers in Dangerous Places http://www.infosecurity-magazine.com/blog/2010/2/17/hotmail-users-look-for-answers-in-dangerous-places/136.aspx <p>An <a href="http://windowsteamblog.com/blogs/windowslive/archive/2010/02/16/short-outage-now-resolved.aspx">outage</a> of the Windows Live ID service affected a large number of MSN users today, including users of the popular Hotmail email service. Hotmail is one of the largest web-based email out ... Wed, 17 Feb 2010 13:57:33 GMT http://www.infosecurity-magazine.com/blog/2010/2/17/hotmail-users-look-for-answers-in-dangerous-places/136.aspx Children – A Threat For Corporate Security? http://www.infosecurity-magazine.com/blog/2010/2/10/children--a-threat-for-corporate-security/131.aspx <p>I read this article this morning: <a target="_blank" href="http://www.computerweekly.com/Articles/2010/02/09/240236/Safer-Internet-Day-How-children-can-undermine-corporate.htm"><font color="#669966">Safer Internet Day: How children can undermine corporate security</font></a> and it actually remin ... Wed, 10 Feb 2010 12:28:50 GMT http://www.infosecurity-magazine.com/blog/2010/2/10/children--a-threat-for-corporate-security/131.aspx Use Music to Fight Cybercrime: ‘Maga No Need Pay’ http://www.infosecurity-magazine.com/blog/2010/2/9/use-music-to-fight-cybercrime-maga-no-need-pay/130.aspx <p>When I travel through Africa, the high piracy rate is often something we address. Not necessarily from a commercial perspective but much more from a security angle. We know that pirated software is often infected with malware and therefore used for criminal activities. However, the discussion is ... Tue, 09 Feb 2010 12:34:59 GMT http://www.infosecurity-magazine.com/blog/2010/2/9/use-music-to-fight-cybercrime-maga-no-need-pay/130.aspx IRS Tax Avoidance Scam http://www.infosecurity-magazine.com/blog/2010/2/8/irs-tax-avoidance-scam/129.aspx <p>Today, eSoft is alerting customers to a new targeted email scam. This newest twist to the common IRS email scam seems to be targeted to organizations, notifying the recipient of a tax evasion complaint being filed against the company.&nbsp;Opening the file infects the user's machine with dangerou ... Mon, 08 Feb 2010 15:11:25 GMT http://www.infosecurity-magazine.com/blog/2010/2/8/irs-tax-avoidance-scam/129.aspx Targeted Attacks – the “Real” Problem http://www.infosecurity-magazine.com/blog/2010/2/5/targeted-attacks--the-real-problem/128.aspx <p>When I talk to customers, the different attacks are often something we discuss (obviously). I often mention that Virus and Worm attacks on a broad scale (like Conficker, etc.) are a serious problem, but at least they are ones we see, understand, and can fight (because we see and understand it).</ ... Fri, 05 Feb 2010 11:00:23 GMT http://www.infosecurity-magazine.com/blog/2010/2/5/targeted-attacks--the-real-problem/128.aspx Fake Firefox Update Pages Push Adware http://www.infosecurity-magazine.com/blog/2010/2/3/fake-firefox-update-pages-push-adware/126.aspx <p>Since its&rsquo; release on January 21st, the newest version of the Firefox web browser has received a great deal of attention.&nbsp;In just a short time it has achieved over 30 million downloads. Adware pushers are capitalizing on the success of Firefox, packing ad serving software in with the p ... Wed, 03 Feb 2010 17:52:13 GMT http://www.infosecurity-magazine.com/blog/2010/2/3/fake-firefox-update-pages-push-adware/126.aspx SPAM! Well, it's finally caught up with me - as confirmed by the research http://www.infosecurity-magazine.com/blog/2010/2/2/spam-well-its-finally-caught-up-with-me---as-confirmed-by-the-research/124.aspx <p>I have lots of email addresses, but there's one that I use as the main catch all one, it&rsquo;s the one I usually give to most people, and it's the one account I like to clean and clear out regularly. Because it is the most publicised one of all my many accounts, it's the only one that I receive ... Tue, 02 Feb 2010 16:15:01 GMT http://www.infosecurity-magazine.com/blog/2010/2/2/spam-well-its-finally-caught-up-with-me---as-confirmed-by-the-research/124.aspx I've been hacked - Give me back my money http://www.infosecurity-magazine.com/blog/2010/2/2/ive-been-hacked--give-me-back-my-money/123.aspx <p>I recently read a story where a business bank customer had $800K stolen from her business account, and although the bank has been able to recover $600K, there is still the outstanding $200K. The customer is claiming that the bank lacked good security, and the bank is claiming that it had good sec ... Tue, 02 Feb 2010 11:45:52 GMT http://www.infosecurity-magazine.com/blog/2010/2/2/ive-been-hacked--give-me-back-my-money/123.aspx Cloud Security Paper: Looking for Feedback http://www.infosecurity-magazine.com/blog/2010/1/30/cloud-security-paper-looking-for-feedback/117.aspx <p>As most of you well know, I was looking for information and opinions on Cloud Security over the last year. I found a lot of papers, but when I talk to our customers I realize that they think about the Cloud but Cloud Security is mainly something for the specialists &ndash; which it is not for me. ... Sat, 30 Jan 2010 11:58:17 GMT http://www.infosecurity-magazine.com/blog/2010/1/30/cloud-security-paper-looking-for-feedback/117.aspx Data Protection Day: An Interesting Study http://www.infosecurity-magazine.com/blog/2010/1/29/data-protection-day-an-interesting-study/116.aspx <p>As you might know, it was time for the <a target="_blank" href="http://dpd.eun.org/web/guest"><font color="#669966">Data Protection Day</font></a> in Europe again. Unfortunately I did not find the videos from this year&rsquo;s competition, yet but I guess we will find them later on the page and o ... Fri, 29 Jan 2010 10:24:35 GMT http://www.infosecurity-magazine.com/blog/2010/1/29/data-protection-day-an-interesting-study/116.aspx Super Bowl associations: football, nachos, big screens and … malware? http://www.infosecurity-magazine.com/blog/2010/1/19/super-bowl-associations-football-nachos-big-screens-and--malware/113.aspx <p>The Super Bowl is the one of the biggest and most watched television events of the year in the United States. People everywhere scour the internet looking for predictions, gambling spreads and news before the event and scores, stories and clips after the event.&nbsp;In anticipation of the increas ... Tue, 19 Jan 2010 19:29:56 GMT http://www.infosecurity-magazine.com/blog/2010/1/19/super-bowl-associations-football-nachos-big-screens-and--malware/113.aspx Lack of Egress Filtering Spurs Success of Injected IFrame Attack http://www.infosecurity-magazine.com/blog/2010/1/18/lack-of-egress-filtering-spurs-success-of-injected-iframe-attack/112.aspx <p>The security community at large and the eSoft Threat Prevention Team have recently noticed an uptick in sites compromised by a new injection attack that results in an injected iframe. This attack can be recognised by its attempts to masquerade the malicious script as GNU, GPL or LGPL. &nbsp;GPL a ... Mon, 18 Jan 2010 22:13:49 GMT http://www.infosecurity-magazine.com/blog/2010/1/18/lack-of-egress-filtering-spurs-success-of-injected-iframe-attack/112.aspx MTaS: Malware Testing as a Service http://www.infosecurity-magazine.com/blog/2010/1/5/mtas-malware-testing-as-a-service/111.aspx <p>Well, in my last post I wrote about the prices for malware. Today I read the next evolution of this: The possibility of having malware tested against anti-malware tools &ndash; not to make sure malware is really recognised, no, the other way round: To make sure it is not recognised.</p> <p>I rea ... Tue, 05 Jan 2010 21:10:36 GMT http://www.infosecurity-magazine.com/blog/2010/1/5/mtas-malware-testing-as-a-service/111.aspx The Cybercriminal’s Wish List http://www.infosecurity-magazine.com/blog/2010/1/1/the-cybercriminals-wish-list/109.aspx <p>I know that Christmas is over and I know how my kids actually compile a Wish List: They take most of the ads (which are targeted to them) and glue them onto a piece of paper for mum and dad to make sure that everything can be found under the Christmas tree&hellip; I guess you know the drill.</p> ... Fri, 01 Jan 2010 11:52:43 GMT http://www.infosecurity-magazine.com/blog/2010/1/1/the-cybercriminals-wish-list/109.aspx Live.com Exploited as Pharma-Fraud Cover http://www.infosecurity-magazine.com/blog/2009/12/23/livecom-exploited-as-pharmafraud-cover/108.aspx <p>The FDA crackdown on online pharmacy sites has driven a lot of attention to illegal and fraudulent online pharmacies and in particular to their methods for tricking people to visit their sites. These practices include prolific spam and search engine poisoning.</p> <p>eSoft&rsquo;s Threat Prevent ... Wed, 23 Dec 2009 17:59:27 GMT http://www.infosecurity-magazine.com/blog/2009/12/23/livecom-exploited-as-pharmafraud-cover/108.aspx Algeria: Conference on Certification (eID) http://www.infosecurity-magazine.com/blog/2009/12/17/algeria-conference-on-certification-eid-/103.aspx <p>When I <a target="_blank" href="file:///C:/Users/rhalbh/AppData/Local/Temp/WindowsLiveWriter1286139640/D04DA26D57B0/www.twitter.com/rhalbheer">tweeted</a> last week that I am on my way to Algeria, I got quite some reactions and questions that I should report how it was. So, let me try to briefly ... Thu, 17 Dec 2009 15:05:10 GMT http://www.infosecurity-magazine.com/blog/2009/12/17/algeria-conference-on-certification-eid-/103.aspx Boeing 787 searches hijacked by rogue anti-virus http://www.infosecurity-magazine.com/blog/2009/12/16/boeing-787-searches-hijacked-by-rogue-antivirus/99.aspx <p>Today, the Boeing 787 Dreamliner jet completed its much awaited first flight. As users searched to find videos and news articles related to the story, blackhats quickly moved in for yet another attack against Google search results.</p> <p><img alt="" style="width: 200px; height: 195px;" src="/_c ... Wed, 16 Dec 2009 17:52:07 GMT http://www.infosecurity-magazine.com/blog/2009/12/16/boeing-787-searches-hijacked-by-rogue-antivirus/99.aspx Beware of MySpace JPG File Downloader - GTALK Messenger Infection http://www.infosecurity-magazine.com/blog/2009/12/15/beware-of-myspace-jpg-file-downloader--gtalk-messenger-infection/96.aspx <p>The malware infection attack surface is increasing day by day. Recently, some of the infected machines with different malware classes such as file downloader are using GTALK for downloading JPG based files from the internet.</p> <p>Actually this file is not a JPG file but a zipped file that cont ... Tue, 15 Dec 2009 04:46:16 GMT http://www.infosecurity-magazine.com/blog/2009/12/15/beware-of-myspace-jpg-file-downloader--gtalk-messenger-infection/96.aspx CIO required - security background essential http://www.infosecurity-magazine.com/blog/2009/12/11/cio-required--security-background-essential/93.aspx <p> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <meta name="ProgId" content="Word.Document"> <meta name="Generator" content="Microsoft Word 12"> <meta name="Originator" content="Microsoft Word 12"> <link rel="File-List" href="file:///C:%5CUsers%5Cuser3%5CAppData%5CLocal% ... Fri, 11 Dec 2009 16:33:19 GMT http://www.infosecurity-magazine.com/blog/2009/12/11/cio-required--security-background-essential/93.aspx Dedicated Spamming - NING House of Hackers Network http://www.infosecurity-magazine.com/blog/2009/12/11/dedicated-spamming--ning-house-of-hackers-network/90.aspx <p>The internet world has become a playground for spammers. Every day there is a new attack pattern. You will find one or another social networking website facing this problem. The reason for this trend is the centralised working of these websites. The interconnection among identities have helped th ... Fri, 11 Dec 2009 04:19:29 GMT http://www.infosecurity-magazine.com/blog/2009/12/11/dedicated-spamming--ning-house-of-hackers-network/90.aspx Get Safe Online: Don’t be a Money Mule http://www.infosecurity-magazine.com/blog/2009/12/4/get-safe-online-dont-be-a-money-mule/70.aspx <p>You know, there are people who blog late, there are people who blog very late and then there is me&hellip;</p> <p>I actually missed that one even though I was triggered: Mid November there was the Get Safe Online Week 2009 in the UK. Usually they do really good stuff and this is the reason I usu ... Fri, 04 Dec 2009 12:00:20 GMT http://www.infosecurity-magazine.com/blog/2009/12/4/get-safe-online-dont-be-a-money-mule/70.aspx Practical working Security Policies http://www.infosecurity-magazine.com/blog/2009/12/3/practical-working-security-policies/69.aspx <p>Effective working policies are a very difficult thing to achieve, whether they are security policies, or any other policies. We've all seen them in our own organisations, employment policies contradict security policies, or ethical policies contradict investment policies, etc. etc.</p> <p>The sc ... Thu, 03 Dec 2009 16:32:53 GMT http://www.infosecurity-magazine.com/blog/2009/12/3/practical-working-security-policies/69.aspx “Black Screen of Death” Reports http://www.infosecurity-magazine.com/blog/2009/12/1/black-screen-of-death-reports/68.aspx <p>Oh, wow &ndash; sometimes the power of social media, the blogs and the internet can backfire. I guess in the meantime you have seen the claims by Prevx that approx. 80 million of PCs are affected by the <em>Black Screen of Death</em> problems supposedly caused by our November Security Updates. Th ... Tue, 01 Dec 2009 20:18:37 GMT http://www.infosecurity-magazine.com/blog/2009/12/1/black-screen-of-death-reports/68.aspx Questions to Ask your (Security) Vendor http://www.infosecurity-magazine.com/blog/2009/12/1/questions-to-ask-your-security-vendor/67.aspx <p>You know that I am a big fan of Security Development Lifecycles as we run it internally to build code which is more resilient against attacks. And I recently blogged on <a target="_blank" href="http://www.halbheer.info/security/archive/2009/11/19/security-a-feature-discussion-some-thoughts-on-goo ... Tue, 01 Dec 2009 10:04:12 GMT http://www.infosecurity-magazine.com/blog/2009/12/1/questions-to-ask-your-security-vendor/67.aspx Security and Usability http://www.infosecurity-magazine.com/blog/2009/11/26/security-and-usability/66.aspx <p>It is not a new concept: The secure way is only secure if it is the easiest way. I have seen a lot of solutions which are extremely secure &ndash; in the eyes of the security people.</p> <p>However, the users find a lot of ways to circumvent the security measures because they are too complex to ... Thu, 26 Nov 2009 21:08:06 GMT http://www.infosecurity-magazine.com/blog/2009/11/26/security-and-usability/66.aspx Reverse Honey Traps - Beating Online Anti-virus Engine in its Own Game http://www.infosecurity-magazine.com/blog/2009/11/25/reverse-honey-traps--beating-online-antivirus-engine-in-its-own-game/65.aspx <p>The web is ever changing arena. Online anti-virus engines provide a diversified functioning of analysing a malware executable thereby providing efficient analysis.</p> <p>This is an online democracy of anti-virus engines. But every positive entity can be transformed into a playground and players ... Wed, 25 Nov 2009 11:47:50 GMT http://www.infosecurity-magazine.com/blog/2009/11/25/reverse-honey-traps--beating-online-antivirus-engine-in-its-own-game/65.aspx Board Level Security Metrics http://www.infosecurity-magazine.com/blog/2009/11/23/board-level-security-metrics/63.aspx <p>Last week I attended the Infosecurity Council and had the previlege of spending some time with many security leaders, and I always find these meeting very interesting, as Iwill always learn something that I&nbsp;didn't know before. This meeting was no exception, before the meeting started, I was ... Mon, 23 Nov 2009 15:11:46 GMT http://www.infosecurity-magazine.com/blog/2009/11/23/board-level-security-metrics/63.aspx Security – A feature discussion? Some thoughts on Google’s Chrome OS http://www.infosecurity-magazine.com/blog/2009/11/19/security--a-feature-discussion-some-thoughts-on-googles-chrome-os/61.aspx <p>To be clear upfront: This is not a 'Microsoft versus Google' post. I cannot even judge how far Google pushed security with the Chrome OS. But the following article raised quite some questions how we look at security: <a href="http://blogs.zdnet.com/security/?p=4969&amp;utm_source=feedburner&amp;u ... Thu, 19 Nov 2009 21:21:17 GMT http://www.infosecurity-magazine.com/blog/2009/11/19/security--a-feature-discussion-some-thoughts-on-googles-chrome-os/61.aspx Blackhats Unleash Fake Blog Campaign Spreading Rogue AV http://www.infosecurity-magazine.com/blog/2009/11/18/blackhats-unleash-fake-blog-campaign-spreading-rogue-av/60.aspx <p>In September, eSoft reported as many as <a href="http://threatcenter.blogspot.com/2009/09/fake-blogs-serve-rogue-malware.html">720,000 compromised sites</a> hosting fake blog pages and being used to distribute rogue anti-virus programmes. Many of these sites are still active and continue to plagu ... Wed, 18 Nov 2009 16:17:10 GMT http://www.infosecurity-magazine.com/blog/2009/11/18/blackhats-unleash-fake-blog-campaign-spreading-rogue-av/60.aspx CoolerEmail Hit by Phishing Scam http://www.infosecurity-magazine.com/blog/2009/11/13/cooleremail-hit-by-phishing-scam/57.aspx <p>CoolerEmail is notifying customers of a new phishing scam used to steal login credentials. The web based email marketing programme carries an impressive client list including Walmart, Toyota, Pepsi and dozens of other big name brands. Any phished credentials can be used to impersonate these compa ... Fri, 13 Nov 2009 15:36:52 GMT http://www.infosecurity-magazine.com/blog/2009/11/13/cooleremail-hit-by-phishing-scam/57.aspx Why it pays to be secure – Chapter 4 – I want to learn! http://www.infosecurity-magazine.com/blog/2009/11/13/why-it-pays-to-be-secure--chapter-4--i-want-to-learn/55.aspx <p>Use these Learning Paths to find a range of Microsoft training references and resources on information security threats and appropriate countermeasures. Learning resources are organised by level (from basic to expert) and provide information on the planning, prevention, detection, and response ph ... Fri, 13 Nov 2009 14:18:34 GMT http://www.infosecurity-magazine.com/blog/2009/11/13/why-it-pays-to-be-secure--chapter-4--i-want-to-learn/55.aspx Embedded open type fonts - The risk lurking up http://www.infosecurity-magazine.com/blog/2009/11/13/embedded-open-type-fonts--the-risk-lurking-up/54.aspx <p>The web is getting a playground for different type of attacks. There is lot of talks going around about Microsoft EOT fonts realm which are being used for launching different type of attacks.</p> <p>Recently I gave a talk at the Excalibur Conference, China in which I talked about launching a CSR ... Fri, 13 Nov 2009 11:31:44 GMT http://www.infosecurity-magazine.com/blog/2009/11/13/embedded-open-type-fonts--the-risk-lurking-up/54.aspx How does Google use your information? http://www.infosecurity-magazine.com/blog/2009/11/6/how-does-google-use-your-information-/49.aspx <p>Following growing concerns on how the web giants Google are using it&rsquo;s users information, they have launched Google Dashboard; a service which allows users with a Google account to view the information that Google has stored on them, It also allows users to delete any information that they ... Fri, 06 Nov 2009 12:40:20 GMT http://www.infosecurity-magazine.com/blog/2009/11/6/how-does-google-use-your-information-/49.aspx International Collaboration on Policies for Cybersecurity and Data Protection http://www.infosecurity-magazine.com/blog/2009/11/5/international-collaboration-on-policies-for-cybersecurity-and-data-protection/48.aspx <p>For&nbsp;a few years we&nbsp;have been&nbsp;working with the Council of Europe in a partnership to help to drive a Cybersecurity treaty. We realise that a problem a lot of law enforcement agencies have is inconsistent legislation, which makes&nbsp;it unbelievably hard to catch cybercriminals. The ... Thu, 05 Nov 2009 20:44:35 GMT http://www.infosecurity-magazine.com/blog/2009/11/5/international-collaboration-on-policies-for-cybersecurity-and-data-protection/48.aspx Power of Knowledge: Security Intelligence Report v7 http://www.infosecurity-magazine.com/blog/2009/11/2/power-of-knowledge-security-intelligence-report-v7/47.aspx <p>It has been a good tradition for quite a while that we make the intelligence we (Microsoft) have available accessible to the broad public. This will help our customers to protect themselves much better. The Security Intelligence Report (SIR) is built on a unparalleled set of sensors out there on ... Mon, 02 Nov 2009 16:15:55 GMT http://www.infosecurity-magazine.com/blog/2009/11/2/power-of-knowledge-security-intelligence-report-v7/47.aspx Ten Computer Hacks In The Movies http://www.infosecurity-magazine.com/blog/2009/10/29/ten-computer-hacks-in-the-movies/39.aspx <!--StartFragment--> <p class="MsoNormal"><b><img src="http://l.yimg.com/g/images/spaceball.gif" alt="" /><br /> </b><!--StartFragment-->Some of the most successful blockbuster films released in the last two decades have been themed on the potential destruction that computer hackers can cause. Her ... Thu, 29 Oct 2009 12:20:56 GMT http://www.infosecurity-magazine.com/blog/2009/10/29/ten-computer-hacks-in-the-movies/39.aspx Could Microsoft solve the scareware problem? http://www.infosecurity-magazine.com/blog/2009/10/22/could-microsoft-solve-the-scareware-problem/38.aspx <p>This morning I read the following article: <a href="http://www.itnews.com.au/News/158689,commentary-microsoft-can-help-kill-fake-antivirus-threat.aspx"><font color="#669966">Microsoft can help kill fake antivirus threat</font></a>. And interesting approach. The proposal is that we could white-lis ... Thu, 22 Oct 2009 07:58:24 GMT http://www.infosecurity-magazine.com/blog/2009/10/22/could-microsoft-solve-the-scareware-problem/38.aspx Compromised Web Servers Host Koobface Malware Cocktail http://www.infosecurity-magazine.com/blog/2009/10/21/compromised-web-servers-host-koobface-malware-cocktail/37.aspx <p>The Koobface gang has struck again using compromised web servers to deliver a potent mix of malware. eSoft threat researchers have found hundreds of newly exploited sites hosting malware which includes downloaders, keyloggers and multiple variants of the Koobface worm.</p> <p><br /> Attackers u ... Wed, 21 Oct 2009 22:59:35 GMT http://www.infosecurity-magazine.com/blog/2009/10/21/compromised-web-servers-host-koobface-malware-cocktail/37.aspx Why it pays to be secure – Chapter 3 – But how do I? http://www.infosecurity-magazine.com/blog/2009/10/18/why-it-pays-to-be-secure--chapter-3--but-how-do-i/36.aspx <p>Security &mdash; you hear about it every day. Being responsible for information security can be a daunting task, so where do you begin?</p> <p>From the design of acceptable use policies to preventing insiders from stealing data, the job can be a challenging one. Join Senior Security Strategist w ... Sun, 18 Oct 2009 19:32:16 GMT http://www.infosecurity-magazine.com/blog/2009/10/18/why-it-pays-to-be-secure--chapter-3--but-how-do-i/36.aspx Unresolved Compromised Fox Sports Host Heading Into Third Week http://www.infosecurity-magazine.com/blog/2009/10/17/unresolved-compromised-fox-sports-host-heading-into-third-week/35.aspx <p>eSoft <a href="http://threatcenter.blogspot.com/2009/10/foxsportscom-used-to-serve-malware.html">first detected a compromise</a> on the Fox Sports website two weeks ago and as of today, at least one Fox Sports host continues to contain automatic links to a multitude of dangerous exploits.&nbsp; E ... Sat, 17 Oct 2009 01:17:07 GMT http://www.infosecurity-magazine.com/blog/2009/10/17/unresolved-compromised-fox-sports-host-heading-into-third-week/35.aspx How the US military has weaponised hacking http://www.infosecurity-magazine.com/blog/2009/10/16/how-the-us-military-has-weaponised-hacking/34.aspx <p><em>&ldquo;Our technological advantage is a key to America's military dominance.&nbsp; But our defence and military networks are under constant attack.&nbsp; Al Qaeda and other terrorist groups have spoken of their desire to unleash a cyber attack on our country -- attacks that are harder to dete ... Fri, 16 Oct 2009 09:33:41 GMT http://www.infosecurity-magazine.com/blog/2009/10/16/how-the-us-military-has-weaponised-hacking/34.aspx How common is the hacking of secure wifi? http://www.infosecurity-magazine.com/blog/2009/10/16/how-common-is-the-hacking-of-secure-wifi/33.aspx <p> <meta content="" name="Title" /> <meta content="" name="Keywords" /> <meta content="text/html; charset=utf-8" http-equiv="Content-Type" /> <meta content="Word.Document" name="ProgId" /> <meta content="Microsoft Word 2008" name="Generator" /> <meta content="Microsoft Word 2008" name="Origin ... Fri, 16 Oct 2009 09:15:56 GMT http://www.infosecurity-magazine.com/blog/2009/10/16/how-common-is-the-hacking-of-secure-wifi/33.aspx Software Piracy – A Threat to Security! http://www.infosecurity-magazine.com/blog/2009/10/14/software-piracy--a-threat-to-security/32.aspx <p>Beginning of this year, I tried to understand, whether we can show a collaboration between Piracy (stolen software) and Malware Infections. I played a little bit with the data I had available and came to the conclusion, that there most probably is: <a href="http://www.halbheer.info/security/archi ... Wed, 14 Oct 2009 13:11:19 GMT http://www.infosecurity-magazine.com/blog/2009/10/14/software-piracy--a-threat-to-security/32.aspx AJAX-JSON - Inside Crux http://www.infosecurity-magazine.com/blog/2009/10/13/ajaxjson--inside-crux/31.aspx <p>The development is occurring at a rapid pace. The innovation is going on. The web is transitioning from the web 1.0 to web 2.0. The implementation structures of various technologies have changed. The Web 2.0 has revolutionized the web in a stringent manner from all the perspectives. The Asynchron ... Tue, 13 Oct 2009 08:34:07 GMT http://www.infosecurity-magazine.com/blog/2009/10/13/ajaxjson--inside-crux/31.aspx Recapping the Fox Sports Website Compromise http://www.infosecurity-magazine.com/blog/2009/10/9/recapping-the-fox-sports-website-compromise/30.aspx <p>On October 2nd eSoft published a <a href="http://www.threatcenter.blogspot.com/2009/10/foxsportscom-used-to-serve-malware.html">blog</a> warning visitors of the Fox Sports website about compromised pages with the potential to serve malicious software. To date, the threat remains on their website ... Fri, 09 Oct 2009 16:18:13 GMT http://www.infosecurity-magazine.com/blog/2009/10/9/recapping-the-fox-sports-website-compromise/30.aspx Web 2.0 – Truth and Lies in AJAX World http://www.infosecurity-magazine.com/blog/2009/10/8/web-20--truth-and-lies-in-ajax-world/29.aspx <p><em>Web 2.0 has metamorphosed the complete scenario of internet.</em></p> <p>In the AJAX world, most of the working functionality is derived by efficient technology methods and ingrained software dependency. In order to scratch deep down the bottom the differential aspect of this technology must ... Thu, 08 Oct 2009 04:41:07 GMT http://www.infosecurity-magazine.com/blog/2009/10/8/web-20--truth-and-lies-in-ajax-world/29.aspx The Africa Cable – A Chance for Africa! – A Threat for the Internet? http://www.infosecurity-magazine.com/blog/2009/10/7/the-africa-cable--a-chance-for-africa--a-threat-for-the-internet/28.aspx <p>The development in Africa especially with the new broadband services to me is a huge chance for the whole continent.</p> <p>I just found a map (Image 1) on the next two years.</p> <p>Even though I have not been in Africa over the last few months, I heard that in different cities fiber is brough ... Wed, 07 Oct 2009 15:15:25 GMT http://www.infosecurity-magazine.com/blog/2009/10/7/the-africa-cable--a-chance-for-africa--a-threat-for-the-internet/28.aspx Why Linux servers are more secure than Windows http://www.infosecurity-magazine.com/blog/2009/10/6/why-linux-servers-are-more-secure-than-windows/27.aspx <!--StartFragment--> <p class="MsoNormal">The Linux/Windows debate is an oldie but a goodie, and there have been many long threads on most computer related forums discussing their relative merits. Linux is free, open-source and community based. Windows is expensive, professionally developed and has ... Tue, 06 Oct 2009 13:49:18 GMT http://www.infosecurity-magazine.com/blog/2009/10/6/why-linux-servers-are-more-secure-than-windows/27.aspx Your password isn't safe - take this simple test to find out how many minutes it would take to crack http://www.infosecurity-magazine.com/blog/2009/10/6/your-password-isnt-safe--take-this-simple-test-to-find-out-how-many-minutes-it-would-take-to-crack/26.aspx <p>There's a well-known saying in information security that the weakest part of any computer system is the person using it. One area where this becomes abundantly clear is in the use of passwords. Allowing users to choose their own passwords can be fatal, with most people not having the first clue a ... Tue, 06 Oct 2009 13:42:14 GMT http://www.infosecurity-magazine.com/blog/2009/10/6/your-password-isnt-safe--take-this-simple-test-to-find-out-how-many-minutes-it-would-take-to-crack/26.aspx When hacking is legal http://www.infosecurity-magazine.com/blog/2009/10/6/when-hacking-is-legal/25.aspx <p>The Merriam-Webster dictionary gives two different definitions of &ldquo;hacker&rdquo; related to computer security. A hacker is either &ldquo;an expert at programming and solving problems with a computer&rdquo; or &ldquo;a person who illegally gains access to and sometimes tampers with informati ... Tue, 06 Oct 2009 13:37:20 GMT http://www.infosecurity-magazine.com/blog/2009/10/6/when-hacking-is-legal/25.aspx Why retina scanning works better for James Bond than it ever would for us http://www.infosecurity-magazine.com/blog/2009/10/6/why-retina-scanning-works-better-for-james-bond-than-it-ever-would-for-us/24.aspx <p>Since the late 80s retinal scanning has been featured in a whole bevy of sci-fi and action films. It's been the security system of choice for some of the silver screen's top spies: James Bond used it in GoldenEye and Ethan Hunt in the Mission Impossible movies. As a result, whilst retinal scannin ... Tue, 06 Oct 2009 12:18:10 GMT http://www.infosecurity-magazine.com/blog/2009/10/6/why-retina-scanning-works-better-for-james-bond-than-it-ever-would-for-us/24.aspx Which famous Twitter accounts have been hacked? http://www.infosecurity-magazine.com/blog/2009/10/5/which-famous-twitter-accounts-have-been-hacked/23.aspx <p>Early in 2009, Twitter suffered two major security lapses. Once when a wave of highly successful phishing campaigns were successful in obtaining a lot of Twitter passwords, and then again when an 18 year old hacker and student of computer games development brute-force'd an administrator account. ... Mon, 05 Oct 2009 16:41:01 GMT http://www.infosecurity-magazine.com/blog/2009/10/5/which-famous-twitter-accounts-have-been-hacked/23.aspx Thoughts on the registered traveler programmes at airports http://www.infosecurity-magazine.com/blog/2009/9/30/thoughts-on-the-registered-traveler-programmes-at-airports/22.aspx <p>When I entered the US this time, I got a brochure on how I could avoid the line at immigration and just get a fast track by registering with the <a href="http://www.cbp.gov/xp/cgov/travel/trusted_traveler/global_entry/" target="_blank">Global Entry Program</a>, a programme, which would pre-screen ... Wed, 30 Sep 2009 17:07:11 GMT http://www.infosecurity-magazine.com/blog/2009/9/30/thoughts-on-the-registered-traveler-programmes-at-airports/22.aspx Hey, You, Get Off of My Cloud http://www.infosecurity-magazine.com/blog/2009/9/27/hey-you-get-off-of-my-cloud/21.aspx <p>I recently had different discussions with different customers and we were looking into the key questions to ask, when you plan to move to the cloud (yes, I am working on a corresponding blog post). I was then asked whether we have an answer to these questions&nbsp;&ndash; well no. For sure not fo ... Sun, 27 Sep 2009 00:47:15 GMT http://www.infosecurity-magazine.com/blog/2009/9/27/hey-you-get-off-of-my-cloud/21.aspx Why it pays to be secure - Chapter 2 - Vulnerabilities http://www.infosecurity-magazine.com/blog/2009/9/23/why-it-pays-to-be-secure--chapter-2--vulnerabilities/20.aspx <p>The Microsoft Security Intelligence Report (SIR) provides an in-depth perspective on the changing threat landscape including software vulnerability disclosures and exploits, malicious software (malware), and potentially unwanted software.</p> <p><a href="http://www.microsoft.com/security/portal/ ... Wed, 23 Sep 2009 23:05:49 GMT http://www.infosecurity-magazine.com/blog/2009/9/23/why-it-pays-to-be-secure--chapter-2--vulnerabilities/20.aspx Moving to the Cloud: Where it worked and where I was challenged http://www.infosecurity-magazine.com/blog/2009/9/21/moving-to-the-cloud-where-it-worked-and-where-i-was-challenged/19.aspx <p>I am running a whole environment at home to experience our technology. However, up to now it was all &ldquo;on premise&rdquo;, no Cloud integration. This has to change. Therefore I was more than happy to join our internal&nbsp; Hosted Exchange 14 beta program. We are offering the hosted Exchange ... Mon, 21 Sep 2009 09:07:05 GMT http://www.infosecurity-magazine.com/blog/2009/9/21/moving-to-the-cloud-where-it-worked-and-where-i-was-challenged/19.aspx Microsoft SDL Team Releases New Security Testing Tools http://www.infosecurity-magazine.com/blog/2009/9/16/microsoft-sdl-team-releases-new-security-testing-tools/18.aspx <p>I often mention that we try to give you all the tools we have as long as it makes sense form a risk perspective. The risk perspective is a simple one: If we give it to you as our customer, we give it as well to the criminals.</p> <p>There are two new tools which just made the bar and which are n ... Wed, 16 Sep 2009 14:11:24 GMT http://www.infosecurity-magazine.com/blog/2009/9/16/microsoft-sdl-team-releases-new-security-testing-tools/18.aspx H1N1 (Swine) Flu Preparedness - Guide for Critical Infrastructure and Key Resources http://www.infosecurity-magazine.com/blog/2009/9/16/h1n1-swine-flu-preparedness--guide-for-critical-infrastructure-and-key-resources/17.aspx <p>This morning I stumbled across a guide by the US Health &amp; Human Services with regards to H1N1. Even though it did not catch much news lately I am not sure whether it is really over. Staying prepared it definitely not a bad thing. Even though it is US-centric, you should probably look into it: ... Wed, 16 Sep 2009 06:33:11 GMT http://www.infosecurity-magazine.com/blog/2009/9/16/h1n1-swine-flu-preparedness--guide-for-critical-infrastructure-and-key-resources/17.aspx Why it pays to be secure - Chapter 1 - Data Breaches http://www.infosecurity-magazine.com/blog/2009/9/14/why-it-pays-to-be-secure--chapter-1--data-breaches/15.aspx <p><span style="color: black;"><a href="http://www.infosecurity-magazine.com/blog/2009/9/11/why-it-pays-to-be-secure/13.aspx">In my first post here</a>, I opened the field for a series on &ldquo;Why it pays to be secure&rdquo;. As I told you there, Henk van Roest, our Security Support Program Manage ... Mon, 14 Sep 2009 10:43:14 GMT http://www.infosecurity-magazine.com/blog/2009/9/14/why-it-pays-to-be-secure--chapter-1--data-breaches/15.aspx Why it pays to be secure http://www.infosecurity-magazine.com/blog/2009/9/11/why-it-pays-to-be-secure/13.aspx <p>You might all know that feeling: You need money to finance security activities and you are asked why this money shall be invested. And then we start to argue that if we do not do it &ndash; bad things happen. These are questions that myself and our support get often. That was the reason why we st ... Fri, 11 Sep 2009 10:59:07 GMT http://www.infosecurity-magazine.com/blog/2009/9/11/why-it-pays-to-be-secure/13.aspx