Malvertising campaigns have reached more users than ever before, reported security firm Invincea yesterday, with many brand-name websites affected — including CBS Sports, Yahoo and eBay in the UK, Livestrong, Perez Hilton, Glenn Beck’s TheBlaze.com…
Malvertising reaches record levels in June Read More »
As government officials continue to plea the case against strong encryption, a group of high-profile international security experts have published a paper arguing that allowing government agents special access to communications would have detriment…
Top global security experts defend encryption Read More »
Enterprises are still heavily dependent on Windows Server 2003 even though there were plenty of warnings that support is coming to an end on July 14 — and this opens them up to security, compliance and operational risks.According to a June report c…
Despite warnings, majority of firms still run some Windows Server 2003 Read More »
According to new recommendations by an IEEE study group, the Wi-Fi protocol needs to be updated to use randomly generated addresses for better security and privacy.
Today, the 802.11 Wi-Fi standards are designed so that each mobile device gets its …
IEEE group recommends random MAC addresses for Wi-Fi security Read More »
Scammers have long used cloaking as a technique to drive up search engine rankings, stuffing webpages full of keywords and links that make them attractive to Google, but not to actual readers.Google wised up and those tactics became ineffective. But…
Scammers bypass Google filters with PDF cloaking Read More »
In a recent analysis of a quarter million endpoint devices in 40 enterprises, every single corporate network showed evidence of a targeted intrusion but most of the activity was not yet at the most-dangerous data exfiltration stage.”No matter how sm…
Report: Every company is compromised, but most infections not yet at critical stage Read More »
Government agencies seeking the lowest bidders typically overlook cybersecurity when awarding contracts, and data breaches are the result, says a security rating expert.According to a review of 25 defense contractors by BitSight Technologies, the me…
Agencies need to pay more attention to supply chain security Read More »
Mobile payments – using your phone instead of a credit card to make purchases at retail locations – has not taken off. Yet.
To read this article in full or to leave a comment, please click here
(Insider Story)
Who’s winning the mobile payments war? Read More »
There’s a dramatic shortage of qualified information security professionals in the industry today. Globally, we’re a million people short, according to Cisco’s 2014 Annual Security Report. According to Ponemon’s 2014 IT Security Jobs Report, 36 percent of staff positions and 58 percent of senior staff positions in IT security went unfilled in 2013. The majority
5 non-traditional hiring tips for InfoSec Read More »
This year has been the best of times and the worst of times for open source code and security. On the one hand, the latest survey by Black Duck Software and North Bridge Venture Partners shows that 72 percent of industry professionals prefer open source software because it’s more secure than proprietary solutions. On the
Tools catch security holes in open source code Read More »
Women make up just 11 percent of information security professionals. Just increasing that number to 22 percent would solve the industry’s staffing shortage problem. Unfortunately, at most companies, the recruitment process is designed to attract the kind of people who already work there. Changing that requires conscious effort. Here are some tips that might help.
10 tips to attract women to infosec jobs Read More »
While there are plenty of standardized methods for penetration testing that we’re all familiar with, the bad guys aren’t sticking to traditional methods for their attacks anymore. So it’s time for the good guys to start thinking outside the box, too: here are a few creative methods to pen test your organization and see
How to get creative with your penetration testing Read More »
Security professionals have long been running penetration tests against their firewalls and other security systems to find weaknesses that need to be addressed. The Common Vulnerability Scoring System is an industry standard, but has been around for a while. The bad guys, however, aren’t limiting themselves to the traditional perimeter attacks anymore. They’re using spear
You Need to Get Creative With Pen Testing. Here’s How to Do It. Read More »
Cover story These days, there’s no shortage of new business technologies and new threat vectors to the enterprise. But what many companies forget is that old technologies pose risks as well, and those risks aren’t going away. In fact, as your legacy systems continue to get more out-of-date while the world around them continues to
Forgotten risks hide in legacy systems Read More »
Even as women have made dramatic advances in medicine, law, and other fields, the proportion of women pursuing undergraduate degrees in the computer sciences has actually been dropping, from around 30 percent in 1990 to 18 percent in 2010, according to the latest data from the National Science Foundation. As a result, according to the
Info sec industry still struggles to attract women Read More »
