The Anatomy of the RSA Attack

The attack against RSA earlier this year has become a case study in how data breaches occur and how companies respond. In this video, Uri Rivner, Head of New Technologies, Identity Protection and Verification, at RSA discusses the attack, the aftermath and the lessons learned from it...

Cyber Defense Summit 2011

On September 14, we will be partnering with InfraGards New York City Alliance to host a one-day Cyber Defense Summit. This year we have seen a drastic increase in data breaches. As these hacks have become daily occurrences, enterprises must learn how to protect their data while simultaneously...

Study: Operation Shady Rat Revealed

Global 2000 companies can be split into two categories, according to the author of a new white paper from McAfee PDF; those that know they’ve been compromised and those that don’t yet know. “The only organizations that are exempt from this threat,” writes the paper’s author, Dmitri Alperovitch,...

Pastebin Could Hold Clues To Hack At Your Company

Worried that your organization might be the victim of a targeted attack or data breach? The proof may be right out in the open: posted for the world to see on Pastebin.com, LodgeIT, Pastie.org and other sites according to security expert Lenny Zeltser. Writing on his blog, Zeltser said that...

Security May Be Broken, But All is Not Lost

It’s been an ugly year so far for the security industry. In fact, if you’re looking at it objectively, almost nothing has gone right in the last six months. The long list of attacks this year–including RSA, Sony, Epsilon, Lockheed Martin, Citigroup and many others–coupled with the emergence of...

Josh Shaul on Broken Security, Targeted Attacks and Database Security

Dennis Fisher talks with Josh Shaul of AppSec about the current run of targeted attacks and data breaches, the state of denial among some security and IT staffs about the extent of the problem and what can be done to address the issues. Podcast audio courtesy of sykboy65 Subscribe to the Digital...

Multiple SQL Injection Vulnerabilities on CNN website Exposed

Multiple SQL Injection Vulnerabilities on CNN website Exposed Yes ! CNN is also not Secure site, There are Multiple SQL Injection Vulnerabilities on CNN News site exposed by Hacker named "Sec Indi". CNN.com is among the world's leaders in online news and information delivery. Staffed 24 hours,...

Multiple SQL Injection Vulnerabilities on CNN website Exposed

Multiple SQL Injection Vulnerabilities on CNN website Exposed Yes ! CNN is also not Secure site, There are Multiple SQL Injection Vulnerabilities on CNN News site exposed by Hacker named "Sec Indi ". CNN.com is among the world's leaders in online news and information delivery. Staffed 24 hours,...

FTC Settles Charges Against Two Companies

The U.S. Federal Trade Commission on Tuesday settled charges against two companies, Ceridian Corporation and Lookout Services, Inc., provided they implement an ample information security program and agree to have audits performed on their company every other year for 20 years. Despite guaranteein...

Password Security Do's and Don'ts

We write a lot about sophisticated, targeted attacks and zero day vulnerabilities aside. But the fact is that most security breaches hinge on easy to prevent security holes – such as insecure passwords. Indeed, even as headlines blare about data breaches and hacks at prominent firms, password...

Source Code is the New Hacker Currency !

Source Code is the New Hacker Currency ! No doubt you've been paying attention to the data breaches pile up lately... but have you noticed a trend? If you wade through the hype and hyperbole, dig into the details of the most prolific intrusions in recent history you'll notice one thing that shine...

Hacker Pleads Guilty To Theft of 600K Credit Cards, Could Get 10 Years

A 26 year-old Georgia man pleaded guilty in federal court in Virginia to the theft of hundreds of thousands of credit cards and a years-long fraud scheme that netted him more than $100,000 in illicit profits – money he used to buy himself a BMW and luxury clothing. Rogelio Hackett of Lithonia,...

Verizon 2011 Data Breach Investigations Report Released !

Verizon 2011 Data Breach Investigations Report Released ! Data loss through cyber attacks decreased sharply in 2010, but the total number of breaches was higher than ever, according to the " Verizon 2011 Data Breach Investigations Report ." These findings continue to demonstrate that businesses a...

Report: Application Security Still Mostly Sucks

The third State of Software Security SOSS report finds that software developers are still doing a poor job of making applications secure. Application testing firm Veracode, which compiled the report, found that 58% of almost 5,000 applications failing a security audit on the first pass – about th...

Texas Comptroller Exposes Personal Data on Millions

The Texas Comptroller’s Office is issuing letters Wednesday to some 3.5 million citizens after personally identifiable data was left exposed to the public on a state server for more than a year, according to a published statement. The exposed data included the names, addresses and Social Security...

Study: Three Of Four Energy Firms Had Data Breach In Last Year

Three quarters of global energy corporations have suffered one or more data breaches in the last 12 months, according to a new survey by The Ponemon Institute, which finds evidence of widespread shortcomings in the energy and utilities vertical. The report, “The State of IT Security: Study of...

Children, the New Hot Commodity in the Business of Identity Theft?

Evidently the kids are not alright. At least, that is when it comes to the increasingly lucrative identity theft black market. A study carried out by a researcher at Carnegie Mellon University’s Cylab found that as many as 10 percent were victims of identity theft – even years before they are old...

PandaLabs Uncovers the Cyber-Crime Black Market

Inventory is growing and prices are dropping on the cyber crime black market, according to a new report from security firm Panda Labs. Stolen banking credentials, malicious programs and stolen credit cards are all for sale online in what Panda experts say is a flourishing criminal black market...

Report : A global shift in cybercrime !!

The target of attacks has shifted from traditional infrastructure to mobile users and endpoint devices, according to a new report. Research from SpiderLabs found that malicious tools became more customized, automated and persistent in 2010. This trend combined with the popularity of mobile device...

Threatpost's Five Security Trends to Watch in 2011

2010 ended with dire predictions about a new age of Internet enabled hacker-activism, but the big story in 2011 will be the explosion in IP enabled, loosely secured, Internet connected stuff. It’s the time of year when all of us gaze into the crystal ball and think of what the next 12 months has ...