| | Fri, 3 Sep 2010 11:26:00 EDT | | | Traditional host discovery via network scanning won't work with IPv6, but alternative methods are available
| |
| | Thu, 2 Sep 2010 15:06:00 EDT | | | The best practices for mitigating this popular form of attack often are not being deployed
| |
| | Thu, 2 Sep 2010 14:40:00 EDT | | | Next-generation IP protocol comes with more security as well as some potential flaws of its own
| |
| | Wed, 1 Sep 2010 17:32:00 EDT | | | Emerging Web-based features make it possible to capture document contents remotely from networked scanners, researcher says
| |
| | Wed, 1 Sep 2010 16:44:00 EDT | | | Small- to midsized businesses taking the biggest hit, experts say, but consumer banking customers could be next in the bull's eye
| |
| | Wed, 1 Sep 2010 11:58:00 EDT | | | New Verizon service offers private public-cloud option
| |
| | Tue, 31 Aug 2010 17:40:00 EDT | | | The Pentagon last week conceded that a USB flash drive carried an attack program inside a classified U.S. military network. Could your company be next?
| |
| | Tue, 31 Aug 2010 17:09:00 EDT | | | State of Delaware contractor Aon mistakenly posts personal data of 22,000 retirees without randomization, officials say
| |
| | Tue, 31 Aug 2010 14:04:00 EDT | | | X-Force Team at IBM revises data on vendors with most unpatched bugs in recent IBM X-Force 2010 Mid-Year Trend and Risk Report
| |
| | Mon, 30 Aug 2010 15:59:00 EDT | | | Botnet's spam traffic cut by 80 percent
| |
| | Mon, 30 Aug 2010 15:55:00 EDT | | | Law enforcement authorities in China, Taiwan seize cash, fraud "manuals" from alleged telecom fraud ring
| |
| | Fri, 27 Aug 2010 14:01:00 EDT | | | Going beyond Visa's best practices guide
| |
| | Thu, 26 Aug 2010 14:27:00 EDT | | | Ecommerce fraud technique siphons commission, referral fees from website affiliates
| |
| | Wed, 25 Aug 2010 17:03:00 EDT | | | Smaller businesses are more likely to use third-party Web applications on their websites -- and they are less likely to scan such code
| |
| | Wed, 25 Aug 2010 16:50:00 EDT | | | New legislation sitting on Governor Arnold Schwarzenegger's desk raises issue of standard breach notifications
| |
| | Tue, 24 Aug 2010 14:46:00 EDT | | | While DNNSEC will improve domain authentication, certificates still needed to verify the brand
| |
| | Mon, 23 Aug 2010 16:45:00 EDT | | | Security researchers are focusing increasingly on mobile devices. The result: your next insider attack could come from a smartphone
| |
| | Mon, 23 Aug 2010 15:56:00 EDT | | | Bug used in infamous 2007 defacement fixed, but additional SQL injection bugs remain
| |
| | Fri, 20 Aug 2010 15:33:00 EDT | | | The right network design can protect against hidden threats from embedded systems and rogue access points as well
| |
| | Fri, 20 Aug 2010 12:57:00 EDT | | | 19-page letter recommends that the HIT Policy Committee adopt the guidelines set out in the Fair Information Practices
| |
| | Thu, 19 Aug 2010 13:28:00 EDT | | | Security experts skeptical of hardware-based security strategy
| |
| | Thu, 19 Aug 2010 13:20:00 EDT | | | Tattoos, mohawks, sheep, and 'pimp' necklaces were just some of the scenes from the hacker conferences in Las Vegas earlier this month.
| |
| | Wed, 18 Aug 2010 17:52:00 EDT | | | Homegrown algorithms for cheating Google's reCAPTCHA released earlier this month
| |
| | Wed, 18 Aug 2010 15:17:00 EDT | | | To comply with regulations, companies increasingly must scan their wireless networks -- a third of which have rogue APs or other insecurities
| |
| | Tue, 17 Aug 2010 17:32:00 EDT | | | Attack used a different spin on mass injection, targeted hosting provider Network Solutions Inc.
| |
| | Mon, 16 Aug 2010 19:47:00 EDT | | | Verizon Business' latest Data Breach Investigations Report shows insiders as a growing threat -- but increase comes from a selective data set
| |
| | Fri, 13 Aug 2010 13:35:00 EDT | | | Most of the healthcare industry's biggest recent IT security breaches could have been avoided, experts say
| |
| | Thu, 12 Aug 2010 17:07:00 EDT | | | Clarifications but no big changes -- but that's what concerns some security experts
| |
| | Wed, 11 Aug 2010 21:50:00 EDT | | | Strapped for cash, SMBs seek strategies to achieve IT security compliance on a shoestring
| |
| | Wed, 11 Aug 2010 13:58:00 EDT | | | SSNs, other personal data of students, employees were inadvertently exposed -- and viewed -- online
| |
| | Wed, 11 Aug 2010 12:00:00 EDT | | | Oily residue left on touchscreen mobile devices may help an attacker deduce password
| |
| | Tue, 10 Aug 2010 16:35:00 EDT | | | Major financial institution's commercial and consumer customers bilked of more than $1 million so far
| |
| | Tue, 10 Aug 2010 08:18:00 EDT | | | Lax handling of data, storage of it, and access to databases biggest culprit
| |
| | Mon, 9 Aug 2010 15:47:00 EDT | | | Windows 7 and Vista also contain this new heap overflow vulnerability, according to security researcher reports
| |
| | Sun, 8 Aug 2010 23:20:00 EDT | | | Researchers find practical problems that can weaken secure authentication via popular Kerberos standard
| |
| | Fri, 6 Aug 2010 22:30:00 EDT | | | DEFCON capture the flag contest shows that humans are still the enterprise's weakest security link
| |
| | Thu, 5 Aug 2010 16:47:00 EDT | | | The Defcon18 contest worked well -- too well -- its organizers say
| |
| | Thu, 5 Aug 2010 13:15:00 EDT | | | Barnaby Jack, director of research at IOActive, at Black Hat USA in Las Vegas last week demonstrated attacks that would allow a criminal to compromise ATMs in order to steal cash, copy customers' ATM card data, or learn master passwords of the machines
| |
| | Wed, 4 Aug 2010 17:43:00 EDT | | | Researchers identify two new botnets, both built on Zeus botnet development kit
| |
| | Wed, 4 Aug 2010 15:18:00 EDT | | | Two consultants at DEFCON conference use a handful of virtual servers in Amazon's EC2 cloud to take down an SMB's network
| |
| | Wed, 4 Aug 2010 14:55:00 EDT | | | TippingPoint's Zero Day Initiative (ZDI) program institutes deadline of six months for vendors to fix bugs -- or else the bugs get published
| |
| | Wed, 4 Aug 2010 11:12:00 EDT | | | In addition, 49% think "crippling denial of service attacks against another country's communication or financial websites" is OK during wartime
| |
| | Tue, 3 Aug 2010 17:36:00 EDT | | | Creating a botnet business can be lucrative -- and isn't as hard as you might think, Black Hat speaker says
| |
| | Tue, 3 Aug 2010 12:31:00 EDT | | | Attacker can create a nearly undetectable user account in SAP once he or she gains unauthorized access
| |
| | Tue, 3 Aug 2010 12:30:00 EDT | | | Demonstration raises privacy and security concerns with RFID EPC Class 1 Generation 2 used in some passport cards, inventory tags, and drivers' licenses
| |
| | Mon, 2 Aug 2010 17:46:00 EDT | | | Rapid7 sponsors open-source w3af web assessment and exploit project
| |
| | Sat, 31 Jul 2010 18:36:00 EDT | | | In the wake of pressure from the FCC, security expert demonstrates major GSM hack
| |
| | Fri, 30 Jul 2010 14:54:00 EDT | | | Efforts to crack U.S. cyberdefenses are standard operating procedure in the intelligence game, Hayden tells Black Hat audience
| |
| | Fri, 30 Jul 2010 13:43:00 EDT | | | Half of all SSL servers run older, insecure version of SSL; attacks against HTTPS browser sessions detailed at Black Hat
| |
| | Fri, 30 Jul 2010 08:50:00 EDT | | | A round-up of articles leading up to and live coverage from Black Hat USA 2010, July 24 to 29, Law Vegas
| |
|