Infosecurity News
Google unveils website security tool
Google has launched a security tool called skipfish, designed to help web developers scan their applications for vulnerabilities.
Network Box changes pricing model
Network Box USA has announced a change in the way that it sells unified threat management appliances. It is switching to a managed service model, and is no longer charging for its hardware.
Research reveals 1 in 4 children have tried hacking
A study just published claims to show that, although 78% of children knowing that hacking it is wrong, one in four of them have tried hacking into other people's Facebook accounts.
Facebook to establish digital trust fund in court settlement
Facebook is to set up a non-profit foundation to promote and develop the online privacy movement under a legal settlement reached this week.
Disgruntled employee accused of remotely disabling over 100 cars
You've heard about Apple potentially bricking iPhones, but that's small potatoes, compared to remotely disabling whole fleets of cars using centrally controlled computer systems. That's just what a 20-year-old employee for a Texas auto dealership is being accused of doing after he was laid off last month.
ISO issues new guidelines for safeguarding electronic medical data
ISO has published two new documents outlining principles and guidelines for secure archiving of electronic medical record data.
Industry prepares for new ICO penalties starting next month
The IT security industry - and its customers - are starting to prepare for the introduction of new and stiff penalties for organisations that allow data to be stolen or leak, and could reasonably be said to be aware of the risk.
ISACA leader gives thumbs up to classifying security as highest priority in data center planning
Research just published claims to show that security, price and power - in that order - are the three main drivers when it comes to companies reviewing their data center requirements.
Ipswitch launches log management suite
Ipswitch has launched the WhatsUp Event Log Management Suite, including its newly acquired WhatsUp Event Rover 3.0, two tools that it hopes will make it easier for customers to manage their networks by logging security events, while protecting files for forensic investigations.
FCC presents National Broadband Plan to lawmakers
The Federal Communications Commission unveiled its new National Broadband Plan to the public yesterday, and shortly thereafter submitted its recommendations to the US Congress.
SQL injection attacks are in decline – or are they?
IBM's X-Force 2009 Trend and Risk report claims to show an 11% fall in discovered vulnerabilities compared to 2008, including a decline in the largest categories, such as SQL injections and ActiveX.
Netflix cans anonymous data contest
DVD rental company Netflix has quietly cancelled a sequel to its Netflix Prize, a contest to enhance its movie recommendation technology using anonymous user data.
Sunbelt Software opens European headquarters
After several months of quietly hiring staff in the European IT security industry, Sunbelt Software has opened a new sales and research centre in Marlow.
Researchers crack RSA encryption via power supply
Researchers claim to have broken 1024-bit RSA encryption in the OpenSSL cryptography library, although the hardware-focused attack is difficult to carry out and involves disrupting power supplies.
St. Louis police department hit by cyber attack
The St. Louis Metropolitan Police Department is investigating a cyber attack that may have compromised the information of 24 people.
Jericho Forum intros new IT security self-assessment evaluation tool
The Jericho Forum has taken the wraps off a self-assessment tool designed to evaluate the effectiveness of IT security products.
New zero-day Internet Explorer 6/7 vulnerability allows trojan to slip through
The steady stream of vulnerabilities discovered in Internet Explorer has continued with the revelation that a zero-day issue with IE 6.x and 7.0 allows a trojan that can steal personal and sensitive data to sneak on to a user's PC.
Privacy is now a major concern for internet users.
Research just published claims to show that more than half of internet users do not trust privacy policies posted on websites, and that just 28.5% respond positively when asked: "do you believe that online sites will actually honour privacy policies they have posted?"
Former TSA worker indicted for tampering
A former worker for the Transportation Security Administration was indicted by a federal grand jury in Denver last week, on charges of trying to damage a protected computer. According to the District of Colorado attorney's office, Douglas James Duchak tried to corrupt a TSA database in the Agency's Colorado Springs Operations Center (CSOC).
US is malicious server leader, says AVG
The US plays host to the largest number of malicious web servers, according to a study released by anti-malware company AVG.
