Iron Rain: Cybersecurity Is an Ever-Changing Battlefield

Editor's Note: This is the final blog in a three-part series, "Iron Rain" from Tom Kellermann and Rick McElroy. Part 1: Iron Rain: What Defines a Cyber Insurgency? Part 2: Iron Rain: Gaining Situational Intelligence to Make Rapid Decisions Part 3: The ever-changing battlefield. Just like in comba...

How a national cybersecurity agency can help avoid a national cybersecurity quagmire

This last October we saw more countries than ever participate in initiatives to raise cybersecurity awareness. What was once largely a US approach has evolved into events and initiatives around the world by governments, civil society groups, and private sector partners. This increased breadth and...

What are Insurers really covering?

Across the country, executives and their boards saw the data breaches that occurred at large, well-run retailers and immediately began asking the right questions about their own systems and protections. The challenge for the insurance industry is that the plan for many of these companies seems to...

Why you should try to join some of the underground hacker forums that are out there

Even if you are considered to be a white hat hacker, you are always still walking a fine line between being a bad guy and a good guy in many people eyes. There are a lot of people out there who believe that there should be no hacking at all being done and everyone who does it should be considered...

Malware making bomb and death threats detected

Japanese police had arrested three people, accused them of making death threats via email and discussion forums. However, later Researchers at Symantec have determined that a piece of malware was making death and bomb threats online on behalf of its victims infected. Symantec confirmed that the...

Mac Security: How Threats Against OS X Have Escalated

In this special edition Threatpost editor-in-chief Dennis Fisher talks with founding editor, Ryan Naraine about Mac security. They discuss why it took longer for the security community to understand the vulnerabilities of the Mac and when these conversations started. You’ll hear how cybercriminal...

Months After A Patch, Targeted Attacks Still Using Adobe Flash Bug

More than three months after it was patched, attackers are still using a vulnerability in Adobe’s Flash product in targeted, ‘APT-style’ attacks. The vulnerability, identified as CVE-2012-0754 was patched in February and linked to targeted attacks weeks later. But new attacks targeting unpatched...

Facebook Open to Comments on Proposed Privacy Policy Changes

Facebook today announced proposed changes to its privacy policy that may better explain how it uses cookies and how long it retains your data, which is: “as long as necessary.” In addition, it wants the option to use your data for advertising on third-party Web sites. In a message called “Enhanci...

Surviving a Security Breach

The topic of this program is often how to prevent security issues and attacks, but the reality is that company’s need to understand attacks and how to respond to attacks after they happen. In this episode, Alex Horan of Core Security and Ted Julian of Co3 join Threatpost Editor Paul Roberts to...

SOPA: The Folly of Capitol Hill

The ongoing controversy surrounding the SOPA and PIPA anti-piracy bills in Congress has produced a lot of things: misunderstanding of what the bills would do; silly rhetoric from trade groups supposedly defending content creators; confusion on Capitol Hill; and a clear demonstration of how...

DHS, NIST, Financial Services Group Form Security Research Partnership

As the finger-pointing and name-calling surrounding the WikiLeaks issue continue in Washington, the White House this week facilitated a cooperative agreement among several key public and private organizations designed to spur joint information security research projects. On Tuesday, the Obama...

Hackid

One of the more interesting trends is the way hacking culture is starting to trickle down from the technology cognoscenti to a far broader and equally receptive audience. Hackid is a great example of that. In its first year ever, Hackid is a conference specifically targeted at kids aged 5 to 17...

JavaScript code can cause the browser attack-vulnerability warning-the black bar safety net

Security researchers have found a Use JavaScript to scan the family and the enterprise network, and attacks on the network server, and the router and printer and other equipment of the method. Researchers say the malicious JavaScript code can be embedded in a Web page, use the browser to browse t...