Infosecurity News
ISACA issues latest version of COBIT infosec governance framework
ISACA, the not-for-profit IT security association, has issued COBIT 5, the latest version of its IT security reference guide.
Utah governor calls for state-wide data audit after Medicaid breach
The Utah governor is calling for a comprehensive audit of all state technology security and data storage procedures following the theft of 280,000 social security numbers of Utah Medicaid recipients.
MPAA’s attempted takedown of Hotfile gets more and more difficult
Don’t throw the baby out with the bathwater says Google; and there’s more baby than bathwater suggests Prof. James Boyle.
UK private members bill designed to censor pornography on the internet
Baroness Howe of Ildicote has introduced the Online Safety Act 2012, designed to force ISPs to install and operate pornography filters.
Financial services the target in massive DDoS increase
A new analysis from Prolexic shows a huge increase in DDoS attacks, largely sourced in Asia and primarily attacking financial institutions.
CISPA is not SOPA, say sponsors
The House sponsors of the Cyber Intelligence Sharing and Protection Act (CISPA) are defending the bill against critics who claim it is just the Stop Online Piracy Act (SOPA) in another guise.
DoD expanding collective cyber self-defense beyond NATO
The US Department of Defense is expanding its collective cyber self-defense cooperation beyond “traditional allies”, such as NATO, to include Japan, South Korea, and New Zealand, a DoD official told a conference this week at Georgetown University.
Apple to release software fix for Flashback malware
Apple said it plans to release software to detect and remove the Flashback malware that is attacking Macs.
FDA should have sole responsibility for medical device security, says board
The Information Security and Privacy Board, which advises the federal government on information security and privacy issues, is recommending that the US Food and Drug Administration (FDA) or another federal agency be given sole authority for medical device security.
Smartphones are still firmly 'enterprise-unready'
Research from by Altimeter Group, Bloor Research and Trend Micro shows that the ‘consumer marketing’ legacy of many smartphones makes them ill-equipped to meet enterprise security demands.
EU trade committee's draft opinion on ACTA: Don't ratify
The European Parliament's Industry, Research and Energy committee for the Committee on International Trade has published its draft opinion on ACTA. Don't ratify, it tells parliament.
DHS gets California company to hack game consoles
In a project that started from law enforcement agencies' request to the US Department of Homeland Security (DHS), which was then farmed out to the US Navy, Obscure Technologies of California has been awarded a contract to find ways of hacking game consoles.
SQL injection tops SMB database security concerns
More than half of small and medium-sized businesses (SMBs) are most concerned about SQL injection attacks against their databases, according to a survey of 6,000 SMBs users of GreenSQL’s database security product.
Firms offer free Flashback detection tools as Mac infections top 600,000
A number of companies are offering free tools to detect if your Mac is infected with the Flashback malware, which is estimated to have compromised 670,000 machines so far.
Adobe plugs security holes in Reader and Acrobat, adds free e-signature to Reader
Adobe has shipped updates for Reader and Acrobat that fix four security holes that could cause the application to crash and allow an attacker to take control of an affected system.
Anonymous attacks high-tech trade groups over support for CISPA
Anonymous claimed credit for launching distributed denial-of-service attacks (DDoS) against a number of high-tech trade groups in retaliation for their support of the Cyber Intelligence Sharing and Protection Act (CISPA).
Social security numbers publicly available on nonprofit tax forms
A survey of three million nonprofit tax returns found close to a half million publicly available social security numbers, according to research by Identity Finder.
Google fixes SSL certificate bug in Chrome browser
Google has released an update for Chrome that fixes a problem with the SSL certificate when users attempt to connect to sites over HTTPS.
Utah increases estimate of Medicaid data breach 10-fold
The Utah Department of Health (UDOH) is now admitting that social security numbers of up to 280,000 individuals were stolen from the Department of Technology Services server, a 10-fold increase from the original estimate.
Real-time data mining comes to Twitter
Twitter is usually described as a micro-blogging social network. To many who monitor its ‘trending topics’ it is also an early warning news service, frequently pointing users to breaking news before the traditional news media reports it.
