Failure to adopt a “continuous auditing” approach to security opens organisations to risk of negligent insider threat, warns Philip Lieberman
TECHNOLOGY POWERING BUSINESS
News Security
Rogue Email Costs Swiss Bank Millions
A banker has accidentally leaked the details of an upcoming flotation in an email, osting the Swiss bank an estimated £6.2 million in fees
Adobe Issues Security Update for Reader And Acrobat
Adobe patches a pair of security vulnerabilities, including one in the Acrobat Flash-rendering DLL targeted by attackers
Half of SMBs Ban Facebook At Work
Fifty percent of SMBs in the UK and US ban their staff from accessing social networking websites, a Webroot survey has revealed
Stuxnet Targeted Iranian Uranium Enrichment, Symantec Believes
Symantec has revealed that the infamous Stuxnet worm was actually targeting the motors at nuclear power stations
Cyberwar And Smartphones Top Threats For 2011
Government cyber attacks and smartphone vulnerabilities top Imperva's list of security risks for 2011
Bug Bounties: Why The Controversy?
Software companies have offered payment for bugs before. Peter Judge asks why it is any different for security vendors to do the same?
Web-Users Fall For Fake AV
Organised gangs are tricking security-conscious Internet users with fake anti-virus
Saudi Arabia ‘Accidentally’ Blocks Facebook
Saudi Arabia has reportedly blocked access to Facebook, but officials called the incident an 'accidental error'
Barracuda Offers $3,000 Bug Bounty
Barracuda Networks has a rewards scheme for researchers who find flaws in its security products.
Koobface Botnet Made $2m From Social Network Users
The Koobface malware made more than $2m by drawing users of Facebook, Twitter and other social networks into its botnet, according to a new study
Twitter Supports Bomb Joker With #IAmSpartacus Tag
Twitter users stand up to be counted, as bomb joke becomes a free speech issue
Afghan Military Secrets Found On eBay Laptop
Personal details of Afghan police and army volunteers were found on a “scrapped” laptop belonging to a British soldier
Massive Apple Security Update Locks Out PGP Users
PGP customers are being warned not to apply Apple's mammoth security update for Mac OS X, after it locked users out of their computers
Dramatic Increase In Malicious Websites, Reports Websense
Widespread abuse of search engine optimisation has fostered a growth in malicious sites this year
Twitter Bomb Joker’s Sentence Upheld
The man who Tweeted about bombing an airport has lost his appeal against his £1,000 fine
Defence Minister Calls For British Cyber Attack Option
The Armed Forces Minister Nick Harvey has called for the UK to have the ability to strike back at those conducting cyberwarfare campaigns
Information Commissioner Rejects MP’s Criticism
The Information Commissioner insists the Google WiSpy incident was handled correctly
UK And EC To Rethink RIPA And ISP Data Retention
Privacy is on the agenda as the UK revises its RIPA laws and the EC's data retention regulations are questioned
Microsoft Adds HTTPS Encryption To Secure Hotmail
Microsoft follows Google's example and adds HTTPS encryption to Hotmail to protect user's entire sessions
BT, TalkTalk Win Judicial Review Of Digital Act
The controversial Digital Economy Act (DEA) is to face scrutiny over whether it is legal and justifiable
ICO Named ‘Keystone Kops’ Over WiSpy Investigation
Members of the Information Commissioner's Office have been labelled as Keystone Kops by a Tory MP for their investigation of Google
Microsoft Patch Tuesday Update Plugs 11 Vulnerabilities
Microsoft's monthly Patch Tuesday update includes remedies for 11 vulnerabilities, including a critical fix for Outlook users
Defence Minister To Outline National Cyber Battle Plan
The Armed Forces Minister Nick Harvey is to use a speech today to outline the threat being posed to the UK by cyber warfare, and government plans to tackle it
Gartner: Security Needs To Get Virtual
Security must evolve as organisations move toward the private cloud, according to Gartner
Cisco: IT Policies Hampering Mobile Workforce
Security worries, among other concerns, are keeping employees from using mobile devices in the workplace, Cisco has found
ICO Slams Companies’ Data Protection Awareness
Public sector bodies scored low on awareness of data protection principles, with the private sector coming out only a little better
Since When Are Hacker Tools Covered By Freedom Of Speech?
Firesheep raised the profile of some attacks on websites, says Peter Judge. But Microsoft has a perfect right to help IT staff to block it
British Navy Website Suspended After Hacking Attack
The Ministry of Defence has confirmed that the Royal Navy website has been suspended after it was hacked into
Zeus Malware Targets Security Researchers
An exploit toolkit linked to the Zeus trojan has been used as a honeypot to attack researchers and rivals