Infosecurity News
Nosey NHS staffer looked at patient records 330-plus times
An NHS IT manager in Yorkshire has been warned he faces a prison term after he admitted illegally spying on medical records of patients. Data security specialist Imperva says the fact that he was able to do this highlights the need to lock down private data in large organisations, and only allow viewing on a need-to-access and auditable basis.
BAE Systems to provide FBI information security safeguards
UK-based BAE Systems received a $40 million order to provide certification and accreditation services, as well as information security risk assessments, for FBI computer networks.
Apple acquires Polar Rose face recognition software firm
Apple is to acquire Swedish face recognition software firm Polar Rose for an undisclosed amount.
Apple acquires Polar Rose face recognition software firm
Apple is to acquire Swedish face recognition software firm Polar Rose for an undisclosed amount.
Twitter hit by XSS attack
The Twitter micro-blogging service website was apparently hit by an XSS, or cross-site scripting, attack today that took advantage of a mouse rollover vulnerability.
Aggressive plug-and-play malware campaign returns
There has been a recent resurgence in plug-and-play (PNP) malware campaigns by spammers after a two-week period of inactivity. The spammers are using what appear to be stolen emails as templates to send out millions of new virulent messages, according to St. Bernard’s Red Condor team.
Microsoft confirms zero-day vulnerability in ASP.NET
Microsoft has issued a security advisory confirming exploits of an unpatched vulnerability that affects web applications built on ASP.NET.
Intel investigates how anti-piracy HDCP protocol was exposed
Intel is investigating how a master key for its High-Bandwidth Digital Content Protection (HDCP) anti-piracy protocol was published online.
Microsoft confirms zero-day vulnerability in ASP.NET
Microsoft has issued a security advisory confirming exploits of an unpatched vulnerability that affects web applications built on ASP.NET.
ArcSight offers $49.00 entry-level audit logging package
Data security and compliance specialist ArcSight has taken the wraps off a slew of product updates - Enterprise Security Manager 5.0, Identityview 2.0 and Logger 5.0 - with the offer of a $49.00 version of Logger, its universal log management software.
Intel investigates how anti-piracy HDCP protocol was exposed
Intel is investigating how a master key for its High-Bandwidth Digital Content Protection (HDCP) anti-piracy protocol was published online.
Adobe rushes emergency security patch for Flash Player
Adobe has issued an emergency update to address a critical security flaw in its software for the second time in two weeks, this time for its Flash Player.
Interpol chief admits Facebook ID theft
Interpol chief Ronald Noble has admitted that criminals have stolen his identity by setting up two Facebook accounts in his name.
Europe calls for global internet treaty
Europe has proposed a global internet treaty to protect the net from political interference and place into international law its founding principles of open standards, net neutrality, freedom of expression and pluralistic governance.
VMware reportedly in talks to buy Novell's SuSE Linux OS unit
VMware is expected to acquire Novell's Linux SuSE operating system (OS) unit as part of Novell's reported plans to divest parts of the company.
IBM panel debates hot-button security issues
A group of security gurus representing IBM convened for the sponsor’s keynote at this week’s Forrester Security Forum in Boston. The lively debate included several key topics on the minds of nearly all information security professionals.
Businesses not taking mobile security seriously, says Vodafone
Most businesses are failing to take security on smartphones as seriously as they do on laptops, says Howard Clegg, head of solution sales, Vodafone UK.
Cloud could help solve security challenges it creates, says IDC
Cloud computing is challenging traditional IT security, but could be a key element in enabling a security policy to meet modern threats, says Eric Domage, research manager at IDC EMEA.
IBM to purchase risk management and compliance specialist
Today IBM announced an agreement whereby it will purchase privately held OpenPages of Waltham, Mass., in an effort to expand Big Blue’s business analytics offerings.
Google confirms dismissal of engineer for breaching privacy rules
Google has confirmed that it has dismissed a systems engineer after he accessed private details from the Gmail, Google Voice and IM accounts of four teenagers.
