December, 2009:

President Barack Obama identifies five priority areas for the new cybersecurity coordinator Howard Schmidt, as he is greeted with a positive response

MBNA confirms data loss after laptop containing personal details of thousands of customers was stolen from vendor

Irdeto acquires Philips Electronics' full suite of white-box cryptology patents and applications to boost 'Cloakware' solution

Microsoft fails in appeal against i4i ruling as it faces £182 million fine and injunction on selling Word

A year in headlines on SC Magazine: September - December

VeriSign adds new languages to its 'Phish/No Phish' game

Claims made that the problem with cyber attacks lies with the technology community as 2010 will be the year of execution

SC conference speaker Howard Schmidt set to be confirmed as Obama's White House cybersecurity coordinator

Have multiple acquisitions left the industry too narrow for 2010?

A year in headlines on SC Magazine: May - August

Gartner claims that checking the small print on social networking security policy will avoid concern in the case of compromise

Failures on DNS control led to the Twitter redirection last week

A year in headlines on SC Magazine: January - April

Spam that contains MP3 files which directs to a Canadian pharmacy website selling cheap Viagra has been detected by several vendors

PayPal remains the most phished brand of 2009 while spam URLs relating to banking sites remain high

Computacenter announced as official partner and reseller of Vblock infrastructure packages

New web filtering appliance launched by SmoothWall for its 'Guardian' family

Mixed response given to establishment of a code of conduct and clarity of cloud computing with questions asked on benefit for enterprises

Twitter hacked overnight with users redirected to a page that claimed it was 'hacked by the Iranian cyber army'

Predictions made that Conficker will continue to dominate malware and botnets into 2010 as new malware uses copycat tactics

A change in data breach notification laws predicted to expose the biggest breach to overshadow previous reports

Malicious advertising predicted to see an increase in 2010

Do you really need to print off that email?

Work on a code of conduct for the definition of cloud computing has begun by the Cloud Industry Forum

Adobe will release a patch for the Reader and Acrobat vulnerability within the next four weeks

Websense and Google warn of scam adverts which uses company names in a bid to lure unsuspecting users in

Prevx and CPP partner to add SafeOnline technology to Identity Protection Alert

LogLogic releases version 4.9 of its log management software

Signify and AppGate partnership sees introduction of cloud-based two-factor authentication

Amazon creates public beta of its virtual private cloud service

Microsoft admits to stealing code from Canadian microblogging site Plurk for its Chinese beta of Juku

Generalisation on private and public cloud combined with a lack of security definition is not promoting trust

Corporate travel company protects web access with SmoothWall

Enterprise security suite solution introduced by Optenet

BlockMaster announces enhancements to SafeStick USB and SafeConsole software

2010: what the security industry predicts will hurt us in the next 12 months

Brand owners do have options when it comes to cybersquatting

MoD laptop loss should cause an evaluation of its security policy

SQL injection flaw found in social networking site with claims made that some accounts had been compromised

Zero-day vulnerability in Adobe Reader and Acrobat already seeing exploits

Oracle moves closer to Sun Microsystems acquisition with proposals for MySQL submitted, but its founder asks people to block the purchase

Akamai Technologies introduces cloud-based web application firewall managed service

A look back at a tricky 12 months for the USB stick as it was blamed for data loss and Conficker, and what the future holds

Claims made that automated analysis of logs is the only viable protection against insider and outsider threats

New laptop loss report from the Ministry of Defence, as it confirms the encryption key was also taken

M86 Security readies Finjan-powered secure web gateway for 2010 release

Kaspersky introduces master password software to manage multiple logins

2009: a year of incident, loss, malware and ultimately education

Card fraud expected to rise as warnings made about security precautions two weeks ahead of Christmas Day

Facebook users continue to heap criticism over privacy control changes, as it is accused of making a transparent grab for advertising revenue

Adobe offers first patch for several months as it fixes critical vulnerability in Flash Player

SafeNet's Luna SA 4.1 hardware security module achieves Common Criteria EAL4+ certification

Citicus risk management software selected for Scottish government's Customer First programme

Claranet achieves PCI DSS compliance for its data centres

SC Magazine explores the Israeli information security industry with a trip to Tel Aviv

SC's review of the decade: turbulent times for information security

Liftoff for the SC Executive Network

Social networking can cause problems in the workplace, but there are solutions

Facebook comes under heavy criticism from users and security commentators after it changes policy on privacy controls

Final patch Tuesday of 2009 from Microsoft sees Internet Explorer zero-day vulnerability covered

Professional Monitor: In association with (ISC)2

RSA Conference Europe's Linda Lynch questions Alessandro Campioni from Telecom Italia

New multi-solutions make it difficult for IT managers to keep tabs on all the products

Top 15 most common attacks in IT security include SQL injection, keylogging and abuse of privileges

Fortify introduces virtual testing to understand overall risk exposure

Online consultation launched by the Information Commissioner's Office to evaluate online privacy

Symantec announces enhancements to storage management and high availability solutions

Microsoft patch batch includes fix for zero-day IE flaw

Researcher demonstrates Pentagon XSS vulnerability

Web attacks are financial boon for crooks, Cisco finds

GrIDsure and CRYPTOCard form partnership to implement authentication technology onto latest version of BlackShield ID

SecureWorks acquires dns to expand business into the UK and Europe

Government announces strategy that will see internet safety taught to primary school children from 2011

Report claims that 2009 was a year of stronger botnets and increased spam detections as cybercriminals learnt lessons from McColo

Mimecast receives the first VerAfied security mark from Veracode for its cloud service

KACE expands KBOX solution to incorporate patching for Windows 7 and Mac OS 10.6 with a move towards automation

Vulnerability detected in SSL products that affects many systems that may allow an attacker to hijack a VPN session

Network created to support technology industry in drive towards Digital Britain

Microsoft to cover Windows, Internet Explorer and Office on Patch Tuesday while Adobe updates Flash Player and AIR

A change in policy is what is needed to prevent data loss, as harsher punishments beckon

Malware will migrate to mobile devices but viruses predicted to have less of an impact

Information Security Forum signs affiliation agreement with Japanese Network Security Association

New web and email appliances from Clearswift

PayPal inadvertently confirm that its own message is a phishing scam

Intrusion prevention is possible on a virtual network but inter-switch monitoring will give a similar perspective as a physical network

Police efforts to shut down fraudulent websites accused of being a stopgap measure at best or maybe a waste of time

Companies fail to secure their mobile calls as challenges of interception predicted to rise in the next six months

As fake sites that sold Ugg boots and Tiffany jewellery are shut down, warnings are made that this will be the biggest Christmas ever for data loss

Stonesoft adds geolocation to its StoneGate management centre

New version of client security introduced by F-Secure

When a hackee met the hacker

How can you protect your brand online if new domains are created?

A visit to northern France yields a new name in unified threat management

Virtualisation being driven by IT departments rather than the boardroom, while a fear of missing out and convenience moves it on

New spam emails sent from the Zeus botnet contain references to the H1N1 swine flu virus

Sourcefire introduces version 4.9 of its 3D system to ease concerns about the security of virtual infrastructures

Employees seek private WiFi in the workplace that leads to monitoring and security problems for IT managers

Businesses have no plans to upgrade to Windows 7, while deployment of anti-virus software reduces

Large enterprise logging solution set for release by LogLogic

Facebook looks back on 'great year' with final changes made on users privacy settings as regional networks are scrapped

Calls for European-style laws on database protection to be implemented in the UK

New tools added to Safend data protection suite for network discovery and compliance

IBM completes the acquisition of database security firm Guardium

Cloud-based web security and email archiving introduced by Webroot

Panel of CISOs and resellers aim to find the most innovative security solutions

Leveraging compliance regulations to achieve total security intelligence

Latest version of Peakflow threat management system from Arbor Networks adds IPv6 insight and 40GB capacity

New Zealand based man ordered to pay more than $16 million after being accused of running major spam operation

URL shortening site bit.ly appoints Websense and Sophos to scan for malicious links

Contrasting opinions have been given on whether a level of preparedness should be part of PCI DSS compliance

Koobface begins Christmas campaign on the 1st December with malicious Facebook messages and video

2011 Census Security Manager

Network protection added for small and medium enterprises by PineApp

Gumtree website joins Get Safe Online following introduction of interactive safety hub

SC Webcasts

Security beyond the (fire)wall

Streaming live on 19th June at 3pm BST

This webcast addresses the technological challenges of maintaining full control of your most sensitive information - even once it goes beyond the firewall - while maintaining the freedom and flexibility necessary to allow your staff and other stakeholders to work as efficiently as possible. Tune in for free to hear from our regular and popular guest speaker, Bola Rotibi from (ISC)2 application security advisory board. To secure your place, please click here.


The truth about vulnerability management: Compliance checkbox or real protection?

Streaming live 2nd July at 3pm BST

How often are you assessing network vulnerabilties? Is your current vulnerability management program merely a compliance checkbox for auditors? Tune into this webcast live to hear from Joerg Weber, head of attack monitoring, Barclays, Lee Barney, an information risk consultant, and Skybox's Michelle Cobb on how you can prioritise vulnerabilities in a way that makes sense for your specific threat posture. Secure your free place here.

SC Featured Webcast

Employee file sharing: the good, the bad and the ugly

This recently held webcast unveiled the full results from the latest data security survey, where it was revealed that 50 per cent of the information security professionals asked said that they had 'no real visibility' of how data is being sent within and outside the company. Guest speakers included the director of information security from Monster.co.uk and the ISO from Atos. If you missed the live show, you can tune into the on-demand video here.

SC Whitepapers

Java security: Balancing existing testing platforms with open source solutions

In a rush to get new products out to market quickly, companies expose themselves to the risk of software failure. Java developers often turn to open source solutions to help protect themselves from risk. This new whitepaper explains how you can use your existing testing platforms alongside open source solutions to fix those issues related to both security and quality within your Java code. To download the paper for free, please click here.


DDoS and downtime: Considerations for risk management

The purpose of this paper is to start a conversation about the often overlooked risk of downtime caused by DDoS attacks and to provide sufficient content for risk managers to account for the DDoS threat as they evaluate risks to their day-to-day operations and long-term mission. To read the paper in full, please download it for free here.


Ponemon 2012 Global Encryption Trends Study

In Ponemon's recent Global Encryption Study, the organisation surveyed 4,205 information security professionals across seven countries to examine how encryption has evolved over the last eight years. The study focused on data protection priorities, budgeted expenditures for encryption and the types of encryption technologies involved, with the findings revealing some interesting insight into the relationship between encryption and its impact on the security position of organisations. To read the full report for free, please download it here.


Advanced spear phishing: The rise of industrial phishing attacks

With phishing still the most common form of attack, hackers are now engaging in industrial-scale phishing attacks that leverage sophisticated customisation and delivery techniques. Borrowing tactics from cloud computing and database marketing, this study looks at longline phishing - an advanced form of spear phishing, which has higher clickthrough and penetration rates than traditional attacks, potentially causing a higher risk to IT security departments across the world. To read the study for free, please click here.


Home | News | Products | Whitepapers | Jobs | Subscribe | Contact Us | About Us | Advertising | Sitemap | Editorial | Subscribe to our RSS feeds RSS

This material may not be published, broadcast, rewritten or redistributed in any form without prior authorization.

Your use of this website constitutes acceptance of Haymarket Media's Privacy Policy and Terms & Conditions