Oracle 11g (11.1.0.6) Password Policy and Compliance

Many security standards require the tracking of users' password history to prevent password re-use. In Oracle 11g 11.1.0.6, if a security administrator has enabled 11g passwords exclusively then tracking password history is broken. This can affect compliance. This was addressed by Oracle in their...

Oracle 11g (11.1.0.6) Password Policy and Compliance

Many security standards require the tracking of users' password history to prevent password re-use. In Oracle 11g 11.1.0.6, if a security administrator has enabled 11g passwords exclusively then tracking password history is broken. This can affect compliance. This was addressed by Oracle in their...

[SECURITY] Fedora 11 Update: firefox-3.5.2-2.fc11

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

PCI DSS compliance : options settings

This plugin reports the values of a few important scan settings if PCI DSS compliance checks are enabled. These scan settings are preset based on the scan template you have selected, but in some cases may be overriden. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

[SECURITY] Fedora 10 Update: firefox-3.0.12-1.fc10

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 11 Update: firefox-3.5.1-1.fc11

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Gartner Sees Better Days Ahead For Security Budgets

From SearchSecurity.com Robert Westervelt The dismal economy has put the brakes on a lot of security projects, but the need to maintain the basics and automate some security functions has fueled interest in managed security services and some specific security areas, according to analysts at Gartn...

[SECURITY] Fedora 10 Update: firefox-3.0.11-1.fc10

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Art Coviello on Holistic Security, the Future of the Security Industry and the RSA Conference

For the landmark 10th episode of the Digital Underground podcast, Dennis Fisher talks with Art Coviello, president of RSA, the security division of EMC, about the evolution of the RSA Conference, the future of the security industry and whether the compliance mentality is taking the focus off...

David Mortman on compliance, the changing job of the CSO and baking bread

Digital Underground podcast with Dennis Fisher In this episode of the Digital Underground podcast, Dennis Fisher talks with David Mortman, CSO-in-residence at Echelon One and longtime security executive, about whether we’ve become too reliant on compliance, the changing nature of the CSO’s job an...

New ICE bill would overhaul federal cybersecurity

A bill set to be introduced in the Senate on Tuesday would make wholesale changes to the way that the federal government handles information security, including the establishment of a Nation Officer for Cyberspace, which would sit right below the president. According to a story on...

[SECURITY] Fedora 10 Update: firefox-3.0.10-1.fc10

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

The 5 claims of PCI DSS snake oil salesmen

The Payment Card Industry Data Security Standard PCI DSS is fast becoming the de facto standard for securing critical infrastructure across many industries. This is because a large number of businesses much larger than originally envisioned process credit cards and are, therefore, required to be...

[SECURITY] Fedora 10 Update: firefox-3.0.9-1.fc10

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Critical infrastructure security still lagging

The interdependencies and interconnections of the networks that run the country’s critical infrastructure assets such as water, power and gas have created a dangerously fragile system in which security is just now becoming a priority, experts say. For years the priorities for these networks have...

[SECURITY] Fedora 9 Update: firefox-3.0.9-1.fc9

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Google tackles cloud security

Google has a reputation for being open and transparent with many of its initiatives and internal workings, but one of the things that the company hasn’t talked much about publicly until recently is security. In this interview with SearchSecurity.com, the director of security for Google Apps, Eran...

RSA 2009: 'History Repeats Itself'

I am very excited to be guest blogging about RSA here on Threatpost. A special thank you to Dennis and Ryan for the privilege. I am also very excited to once again be speaking at RSA this year. Last year, I was on a panel with Mike Rothman, Rich Mogull, Martin McKeay and Ron Woerner titled...

Security budget issues to resonate at RSA Conference

From SearchSecurity Robert Westervelt The glum economy has put increased pressure on CISOs to cut costs while maintaining the same security defenses. Tightening budgets, coupled with increased compliance demands could have security professionals looking for answers next week at the 2009 RSA...

Security is about outcomes, not about process

By Adam Shostack, Emergent Chaos Nearly a decade ago Bruce Schneier wrote “Security is a process, not a product.” His statement helped us advance as a profession, but with the benefit of hindsight, we can see he’s only half right. Security isn’t about technology. Security is about outcomes, and o...