Survey: SMBs Remain Blissfully Unfazed by Cyberthreats

More than three quarters of small business owners claim their companies are safe from cyber attacks, yet only 17 percent of those businesses have implemented a formal cybersecurity plan. This is just one of many problems for small businesses in the digital realm, according to a joint survey .PDF...

New Center, Council Aims to Foster Cybersecurity Discussion at a State Level

Hoping to better address the cause and concerns of cyber attacks on a state level, last week the National Governors Association NGA announced the creation of the Resource Center for State Cybersecurity, an initiative set into motion by Governor Martin O’Malley D-Md. and Governor Rick Snyder R-Mic...

PwnedList Partnership Provides Credential Monitoring for LastPass Users

A partnership announced today merges LastPass’s credential management services with PwnedList’s credential monitoring services. The companies said “credential management and credential monitoring are natural complements” and that the move will bolster password security for LastPass end users...

Senator Seeks to Strengthen SEC-Required Cybercrime Reporting

U.S. Sen. Jay Rockefeller wants to strengthen SEC legislation that requires publicly traded companies disclose significant digital security breaches, mainly because most aren’t. The chairman of the Senate Commerce, Science and Transportation Committee last week added a provision to cybersecurity...

FTC Sues Wyndham Over Breaches Linked to $10m In Fraud

UPDATE: The U.S. Federal Trade Commission has fined Wyndham Hotels for a string of data breaches that resulted in information on hundreds of thousands of customers being lost to cyber criminals. An FTC complaint, filed on June 26, 2012, asks for “permanent injunctive relief” against Wyndham for...

P2P Encryption Program now available from PCI Council

The PCI council has updated the Point-to-Point encryption P2PE program requirements PDF. The update impacts merchants, payment applications, point of sale vendors and service providers. As a participating organization of the PCI P2PE task force, providing input into the standard, I wanted to...

UNC-Charlotte Data Breaches Expose 350,000 Social Security Numbers and Much More

Confidential data, including bank account and Social Security numbers for some 350,000 University of North Carolina-Charlotte students, staff and faculty, were accidentally exposed — some for almost 15 years — due to a system misconfiguration and incorrect access settings that made electronic dat...

Mobile Device Adoption Outpacing Security

Some 63 percent of mobile device users are unsure about whether they trust the security of mobile technologies, according to Juniper Network’s Trusted Mobility Index PDF. That lack of certainty is appropriate considering that 30 percent of IT professionals in the study told Juniper Networks that...

CERT Warns Of Cyber Threats To Gas Pipelines

The Department of Homeland Security said it is investigating a string of cyber intrusions targeting companies that operate national gas pipelines in the U.S. The DHS’s Industrial Control System Computer Emergency Readiness Team ICS-CERT disclosed in its April, 2012 newsletter that it is...

Half Of Massachusetts Residents Victims Of Data Breach In Last Four Years

Data from the Massachusetts Office of Consumer Affairs & Business Regulation OCABR shows that 3.2 million residents – almost half the population of the state- have been the victim of a data breach in the last four years. The report finds that 1,833 breaches have been reported to the State by a wi...

Hacktivism Breached 174 Million Records in 2011

Hacktivism Breached 174 Million Records in 2011 According to the Verizon 2012 Data Breach Investigations Report released on Thursday, Hacktivists stole more data from large corporations than cybercriminals in 2011, according to a study of significant security incidents. The report surveyed 855 da...

As Data Breaches Mount, PwnedList.com Finds A Market Identifying Victims

Pwnedlist, the Web site that compiles information on victims of data breaches, is going commercial with a plan to charge individuals for daily monitoring of their email addresses against a growing database of more-than 12 million email-login credentials. We reported on Pwnedlist.com a few months...

Threats From Third Party Vendors Demand Vigilance

by B.K. DeLong Wikileaks’ decision this week to post the first of five million emails from Texas-based strategic intelligence firm Stratfor shone a spotlight on what experts say is a serious and growing problem: lax data, network and physical security at third party vendors and service providers...

Remote-Access Apps Continue to Serve As Popular Attack Vectors

By Rob Lemos There are a lot of good reasons to have remote-access software installed on a business network: It might be there to allow a remote administrator to manage a database; or to give a third-party point-of-sale management firm to apply patches; or even to allow a PBX vendor access to the...

Banks Coming Together To Fight Hackers, Prevent Attacks

Major banks like Morgan Stanley, Goldman Sachs Group and Bank of America are putting together plans to help identify new security threats before they happen, according to a report from the Wall Street Journal this week. The financial services firms will team up with the Polytechnic Institute of N...

Study Finds Online Privacy Tools Fail to Protect Users

Poor design and usability issues make leading online privacy management tools ineffective, according to researchers at CMU’s Cylab. The report said the results suggest that the current system of industry-led opt out protections is “fundamentally flawed.” The report, “Why Johnny Can’t Opt Out: A...

Insider Threats vs Hackers - by Emmett Jorgensen

Insider Threats vs Hackers - by Emmett Jorgensen Emmett Jorgensen has worked in IT and Infosec for over 10 years. He works for Kanguru Solutions www.kanguru.com, a manufacturer of secure portable storage solutions. Article taken from 'The Hacker News' Magazine - October Edition. You can Download...

Got Pwned? PwnedList.com Knows

With more and more victims of identity theft minted every day, figuring out if you’re one of the unlucky masses with a leaked email password is yeoman’s work. Now one security researcher is trying to make it easy with PwnedList.com, a Web site that collects leaked and stolen data, then tells...

Attorney General: Massachusetts Won't Investigate iTunes Fraud

It looks as if Apple iTunes users who have been the victim of identity theft will have to look for a new knight in shining armor to wring answers from the notoriously close-lipped Cupertino technology giant. The Massachusetts Attorney General’s Office said on Monday that it isn’t planning to...

Akamai Employee Attempts to Sell Trade Secrets to Israel, Pleads Guilty

A Massachusetts man plead guilty on charges of foreign economic espionage on Tuesday after selling trade secrets from his former employer to an undercover FBI agent posing as an Israeli intelligence officer. According to an Associated Press report, Elliot Doxer, 43, of Brookline, Massachusetts,...