Identity and access management products

Government expected to unveil eight IDA suppliers for online services

The government is to announce suppliers – including PayPal, BT and the Post Office – to provide identity assurance (IDA) for online public services Continue Reading

By

• Kathleen Hall, TechTarget

Security Think Tank: You can’t protect what you don’t know you’ve got

IP theft: who should be tackling it and how? Continue Reading

By

• Adrian Wright

Leading Indian banking portals contain glaring security lapses

Even as Internet banking portals transform the way Indians bank, vulnerabilities exist in banking websites like SBI, Citibank India, HDFC Bank and ICICI Bank. Continue Reading

By

• Ajit Hatti, Contributor

Organisations need alternative data protection as security models fail

Organisations' security models are failing - so could it be time to adopt an intelligence-led approach to data protection and fighting cyber crime? Continue Reading

By

• Warwick Ashford, Senior analyst

RSA Europe: Thousands of unprotected virtual servers exposed to the web

Organisations are failing to protect data in virtual environments, says Jason Hart, vice-president cloud solutions, SafeNet Continue Reading

By

• Warwick Ashford, Senior analyst

RSA Europe: Security concerns whole supply chain, says Misha Glenny

Targeted attacks affect the whole supply chain, not just big corporations, author Misha Glenny tells RSA Conference Europe 2012 attendees Continue Reading

By

• Warwick Ashford, Senior analyst

DWP to announce identity assurance suppliers

The Department for Work and Pensions (DWP) is to announce the first providers in the government’s identity assurance (IDA) scheme at the end of October Continue Reading

By

• Warwick Ashford, Senior analyst

CW500: Managing the mobile workforce (part 1)

Mobile working has transformed Colt Telecommunications beyond recognition over the past three years Continue Reading

By

• Bill Goodwin, Investigations Editor

Security firm warns against Samsung Galaxy Tab for enterprise use

Security specialist Context Information Security says vulnerabilities in the Samsung Galaxy Tab make it unsuitable for use in the enterprise Continue Reading

By

• Caroline Baldwin, Freelance editor and journalist

HMRC deploys Becrypt off-the-shelf encryption

HMRC will use Becrypt Disk protect, which has recently been certified under the government’s Commercial Product Assurance (CPA) Scheme. Continue Reading

By

• Cliff Saran, Managing Editor

Limitations of two factor authentication (2FA) technology

The common two factor authentication (2FA) techniques used In India have several shortfalls. We take a look at security risks associated with 2FA solutions. Continue Reading

By

• Rakesh Thatha, Contributor

Dell SecureWorks uncovers cyber espionage targeting energy firms

Dell SecureWorks researchers have discovered a cyber espionage campaign targeting several companies, including two in the energy sector Continue Reading

By

• Warwick Ashford, Senior analyst

Government launches £3.8m cyber security institute

The government has ramped up moves to tackle growing cyber security threats by launching a £3.8m research institute. Continue Reading

By

• Kathleen Hall, TechTarget

FBI denies link to leaked Apple device codes

The FBI says there is no evidence that Anonymous gained access to 12 million identity codes for Apple devices by hacking an FBI agent's laptop Continue Reading

By

• Warwick Ashford, Senior analyst

Anonymous claims a million Apple IDs in FBI breach

Hacking group Anonymous claims to have released over a million Apple Unique Device Identifiers (UDIDs) obtained from breaching FBI networks Continue Reading

Powerful cyber attack tools widely available, say researchers

More low-level cyber criminals are getting access to sophisticated attack tools, say cyber intelligence specialists Continue Reading

By

• Warwick Ashford, Senior analyst

Advanced cyber-security intelligence

Analysts Bob Tarzey and Clive Longbottom look at the business case for rolling out next security information and event management tools. Continue Reading

— www.computerweekly.com

Cyber Vulnerability Index

What does your online corporate profile reveal? With so many cyber attacks in the news recently, executives are becoming increasingly concerned about their organisation’s exposure to hackers. Continue Reading

— www.computerweekly.com

Businesses worldwide fail to prepare for cyber threats, says Kaspersky Lab

Companies around the world have failed to address cyber threats, according to a survey from security organisation Kaspersky Lab Continue Reading

By

• Warwick Ashford, Senior analyst

At least 9 out of 10 top mobile apps hacked, study shows

An average of 96% of the top 100 paid mobile apps have been hacked, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

More than 1,000 school application details leaked on the internet

Personal information about more than 1,000 children has been published on the UK Independent Schools Guide website after an alleged cyber attack Continue Reading

Good data protection can be cheap and easy, says ICO

The ICO says charities and third sector organisations stand to benefit most from a data protection check-up. Continue Reading

By

• Warwick Ashford, Senior analyst

LinkedIn data breach costs more than $1m

LinkedIn says the forensic investigation and other recovery costs of the data breach in June could have topped $1m. Continue Reading

By

• Warwick Ashford, Senior analyst

Cyber threats affect banks worldwide

Nearly a quarter of the world's banks were hit by security breaches in the past year, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

Twitter users targeted by Blackhole malware

Twitter users are being targeted by tweets containing malicious links that claim recipients are pictured in an online photo Continue Reading

By

• Warwick Ashford, Senior analyst

Australian telco AAPT confirms Anonymous data breach

Australian telecoms firm AAPT confirms business customer data was breached by hacktivist group Anonymous at an external service provider Continue Reading

By

• Warwick Ashford, Senior analyst

Many global firms unaware of online risk, finds KPMG

Many global organisations could do a lot more to protect their private data and reduce exposure to attacks by hackers, according to KPMG Continue Reading

By

• Warwick Ashford, Senior analyst

Sophos combines endpoint security and UTM

Security firm Sophos combines endpoint protection and unified threat management (UTM) products into a single physical or virtual appliance Continue Reading

By

• Warwick Ashford, Senior analyst

Google Android OS Trojan virus hits 100K devices in China

Trojan malware has hit 100,000 devices using the Google Android operating system (OS) in China, say security researchers Continue Reading

By

• Warwick Ashford, Senior analyst

BT extends cyber security agreement with MoD

BT is to extend its cyber security agreement with the Ministry of Defence (MoD) in a deal to expand its cyber defence service Continue Reading

By

• Warwick Ashford, Senior analyst

White House cyber security coordinator Howard Schmidt joins Qualys

Former White House cyber security coordinator Howard Schmidt is to join the board of security and compliance company Qualys Continue Reading

By

• Warwick Ashford, Senior analyst

Network security: Is new technology bypassing traditional controls?

Network security practices are among the most mature, but can businesses be sure network traffic is not sneaking past traditional controls? Continue Reading

By

• Warwick Ashford, Senior analyst

FTC sues Wyndham Worldwide hotel group over data breaches

The US Federal Trade Commission (FTC) is suing hotel group Wyndham Worldwide over claims it failed to secure customer data Continue Reading

By

• Warwick Ashford, Senior analyst

Techniques for preventing a brute force login attack

A brute force login attack can enable an attacker to log in to an application and steal data. Rob Shapland explains how to prevent brute force attacks. Continue Reading

By

• Rob Shapland

Ethiopian government blocks Tor Network online anonymity

The Ethiopian government is blocking access to the Tor Network that enables online anonymity, according to Reporters Without Borders Continue Reading

By

• Warwick Ashford, Senior analyst

2012: Will this be the year TPM finally comes of age?

Will 2012 be the year that TPM finally delivers on its potential to provide a hardware-based "root of trust" for enterprise information security? Continue Reading

By

• Warwick Ashford, Senior analyst

Flame malware gets kill command

The controllers of Flame, the most powerful cyber weapon discovered to date, have recently sent a kill command that removes the malware from some infected computers Continue Reading

By

• Warwick Ashford, Senior analyst

eHarmony, Last.fm join LinkedIn with password leaks

Online dating site eHarmony and Last.fm have joined LinkedIn with password leaks, as hackers focus on social networks Continue Reading

By

• Warwick Ashford, Senior analyst

Top 10 tips for IPv6 security

Many organisations are being misled about the complexities surrounding IPv6 security, according to security firm Stonesoft Continue Reading

By

• Warwick Ashford, Senior analyst

Security researchers discover powerful cyber espionage weapon 'Flame'

Security researchers have discovered a cyber espionage weapon, dubbed 'Flame', with a functionality greater than any other known threat Continue Reading

By

• Warwick Ashford, Senior analyst

UK regulator PhonepayPlus shuts down Angry Birds smartphone scam

UK users of Android smartphones have been targeted by premium-rate phone scams masquerading as popular apps such as Angry Birds Continue Reading

By

• Warwick Ashford, Senior analyst

Mobile threats demand focus on data protection, says Websense

Business needs to focus on data protection as cyber criminals turn to mobile malware, says Websense. Continue Reading

The Pirate Bay is latest site to be hit by DDoS attack

The Pirate Bay has become the latest high-profile website to be hit by a distributed denial-of-service (DDoS) attack Continue Reading

By

• Warwick Ashford, Senior analyst

InfoSecurity Europe: Odd Bugs

A selection of photos showing how far exhibitors will go to get people to their stands at InfoSecurity Europe 2012... Continue Reading

By

• Cliff Saran, Managing Editor

Half of UK networks vulnerable to APTs

Many UK corporate networks are vulnerable to advanced persistent threats (APTs), a survey has revealed. Continue Reading

By

• Warwick Ashford, Senior analyst

SOCA shuts down network of CVV sellers' carder sites

The Serious Organised Crime Agency shut down 36 CVV sellers who were selling stolen credit card and banking credentials to buyers around the world. Continue Reading

By

• Ron Condon

Infosec 2012: Unscrubbed hard drives a threat to business, says ICO

Unscrubbed hard drives on computers that are decommissioned and sold on represent a significant risk to business Continue Reading

By

• Warwick Ashford, Senior analyst

Infosec 2012: Patching alone can deliver 80% protection

Keeping software up to date with security patches can deliver 80% protection from cyber threats, says security firm Secunia. Continue Reading

By

• Warwick Ashford, Senior analyst

Infosec 2012: Cloud enables security expertise for SME

Small and medium enterprises (SMEs) typically face the same threats as bigger organisations, but lack the same level of expertise and other security resources. Continue Reading

By

• Warwick Ashford, Senior analyst

Infosecurity Europe

With 300 exhibitors and hundreds of delegates, security is still hot on the IT agenda. Cliff Saran presents the highlights of infosecurity Europe Continue Reading

By

• Cliff Saran, Managing Editor

2012 Information Security Breaches Survey

Security breaches cost the UK billions over the last 12 months as cyber attacks reached record levels. Continue Reading

— computerweekly.com

UK firms see competitors as greater cyber attack risk than criminals

More than half of UK firms expect a cyber attack in the next six months, but see competitors as a greater risk than criminals Continue Reading

By

• Warwick Ashford, Senior analyst

UK business fears impact of new EU data protection framework

More than half of senior UK IT managers in large enterprises believe the proposed new EU data protection framework will cost their business more money, a survey has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Warwickshire-based company to revamp data protection following breach

A Warwickshire-based company has committed to taking action to protect personal data, following a breach of the Data Protection Act Continue Reading

By

• Warwick Ashford, Senior analyst

Barclays Bank card data vulnerable to mobile phone scanning fraud

Channel 4 News has revealed fraudsters can access the data on Barclays Bank cards by scanning them with mobile phones Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Bank of India’s 2FA with mutual authentication goes beyond OTPs

Indian BFSI major Bank of India chose mutual authentication when it required a two factor authentication (2FA) solution. There’s been no looking back. Continue Reading

By

• Varun Haran, Reporter

UK hacktivist cases should spur business to action, says lawyer

The last of four alleged UK members of hacktivist group LulzSec has appeared in Westminster magistrates court in London Continue Reading

By

• Warwick Ashford, Senior analyst

BBC cyber attacks highlight difficulty of attribution

The BBC has said it is was targeted by cyber attacks following a campaign by Iran against its Persian service, but stopped short of accusing Tehran of ordering the cyber attacks Continue Reading

By

• Warwick Ashford, Senior analyst

2012 security outlook

This report, based on extensive research from chief information security officers, identifies the top 10 security imperatives for 2012. Continue Reading

— ComputerWeekly.com

RSA 2012: IT security experts urge enterprises to ban smartphone BYOD schemes

Enterprises should ban employees from using their own smartphones for work, a panel of IT security practitioners told the RSA Conference 2012 Continue Reading

By

• Warwick Ashford, Senior analyst

DWP tenders for £25m IDA services

The Department for Work and Pensions (DWP) has tendered for a £25m identity assurance (IDA) framework to create a marketplace of providers across the public sector. Continue Reading

By

• Kathleen Hall, TechTarget

IT departments risk losing responsibility for IT security

IT security professionals can no longer take it for granted that IT security will continue as part of the IT function Continue Reading

By

• Bill Goodwin, Investigations Editor

Post Office reveals plans for identity assurance services

The Post Office is tendering for hardware and software which will enable it to be a provider of the government's Identity Assurance (IDA) services.    Continue Reading

By

• Kathleen Hall, TechTarget

Windows security case study: Controlling Windows 7 user privileges

After migrating from Windows XP to Windows 7, Oxford University Press used Avecto’s Privilege Guard to control Windows 7 user privileges. Continue Reading

By

• Ron Condon

OSSIM update enables cyber threat intelligence sharing

The latest update to the Open Source Security Information Management (OSSIM) base system includes a mechanism for sharing cyber threat intelligence. Continue Reading

By

• Warwick Ashford, Senior analyst

Fewer than a third of UK organisations plan mobile security projects

Despite the media hype around the adoption of mobile technologies and the need to secure them, relatively few UK organisations are planning mobile security projects, a survey has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

When X.509 security certificates fail, servers break

Why are X.509 certificates causing computers to stop dead? Continue Reading

By

• Cliff Saran, Managing Editor

Fighting fraud in government

Cybercrime has emerged as a growing threat to public sector organisations, this research from PwC reveals. Continue Reading

— computerweekly.com

IT in Europe, Security Edition: Password security standards and trends

Passwords have long been a security problem. This IT in Europe: Security Edition looks at password trends and alternative forms of authentication. Continue Reading

By

• SearchSecurity.co.UK Staff

Is it the end of the line for antivirus signatures?

Traditional antimalware can't keep up with the threat landscape. Are antivirus signatures destined for the rubbish bin? Continue Reading

By

• Ron Condon

Emerging 2012 security trends demand information security policy changes

2012 security trends involving cookies, fines, devices and threats will demand more skills -- and a little finesse -- from security professionals. Continue Reading

By

• Ron Condon

Alternatives to passwords: Replacing the ubiquitous authenticator

As the relative security of passwords falters, are they destined for obscurity? Continue Reading

By

• Ron Condon

Segregation of duties: Small business best practices

Segregating duties can be tough in organisations that have few staff members and resources. Get duty segregation best practices for SMBs. Continue Reading

By

• Michael Cobb

Special report on EMC

This 8-page special report from Computer Weekly, packed with graphs and diagrams, is essential reading for anyone considering EMC as a supplier. Continue Reading

— computerweekly.com

Concerned about tablet security issues? Some are, others not so much

Users love their tablets, but security pros are concerned about tablet security issues. However, though tablets bring new threats, not everyone is ringing the alarm. Continue Reading

By

• Ron Condon

One in four IT security staff abuse admin rights, survey shows

At least one in four IT security staff use their privileged login rights to look at confidential information, a survey has revealed. Continue Reading

By

• Warwick Ashford, Senior analyst

Breaking the code: Are passwords destined for obscurity?

User passwords for websites, email and social networks are often the weakest link in the security chain. The winter edition of IT in Europe: Information Security e-zine investigated the state of passwords in the UK and presented alternatives to the ubiquitous authenticator. Continue Reading

IT security not always part of cloud decision, says IDC

Cloud adoption is outstripping security concerns, says Eric Domage, programme manager for IDC in Europe. Continue Reading

By

• Warwick Ashford, Senior analyst

Japan may be facing sustained cyber attack

Japan's mapping agency is the latest in a series of government agencies to be targeted by hackers, raising fears that the breaches are part of a series of sustained attacks. Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook admits to 600,000 cyber attacks a day

Facebook has revealed that every 24 hours it receives around 600,000 logins to the social networking website from impostors attempting to access users' messages, photos and other personal information. Continue Reading

By

• Warwick Ashford, Senior analyst

Website secure login: Alternatives to out-of-wallet questions

Learn about alternatives to static knowledge-based authentication and out-of-wallet questions for secure website logins in this tip. Continue Reading

By

• Michael Cobb

Identity and access management (IAM) program implementation guidelines

The first part of this identity and access management (IAM) program guide details how to optimally structure the implementation’s foundation. Continue Reading

After breach at RSA, two-factor authentication options abound

Companies specialising in two-factor authentication hope to boost business following the breach of RSA's SecurID, and many plan to capitalise with new products at Infosecurity Europe. Continue Reading

By

• Ron Condon

What is OpenID? How to use OpenID SSO in your organisation

An OpenID SSO system allows organisations to simplify website user authentication management. But is OpenID security an issue? Expert Michael Cobb explains. Continue Reading

By

• Michael Cobb

10 identity and access management (IAM) implementation mistakes

An overview of the common issues organizations overlook while deploying an identity and access management (IAM) solution. Continue Reading

By

• Nilesh Shirke

Biometric authentication technology curbs microfinance org’s losses

Growing Opportunity implements biometric authentication technology to overcome financial losses resulting from duplicate loan applications. Continue Reading

By

• Dhwani Pandya, Principal Correspondent

Experts: IDS is here to stay

IDS technology has survived predictions that it would be replaced by IPS. One expert says it will remain a separate product while IPS is folded into firewalls. Continue Reading

By

• Bill Brenner

Review: Sun Java System Identity Manager 7.0 'impressive'

Hot Pick: Sun Java System Identity Manager 7.0 excels with agentless connectors, scalability and amazing auditing. Continue Reading

By

• Brad Causey

RFID privacy, security should start with design

Companies planning to deploy radio frequency identification technology (RFID) must demand that privacy and security issues are addressed early. Continue Reading

By

• Robert Westervelt, TechTarget

Sourcefire fixes Snort flaw

Attackers could exploit a flaw in the popular open source Snort IDS tool to cause a denial of service or launch malicious code. Continue Reading

By

• Bill Brenner

Quiz: Using IAM tools to improve compliance

A five-question multiple-choice quiz to test your understanding of the content presented by expert Tom Bowers in this lesson of SearchSecurity.com's Identity and Access Management Security School. Continue Reading

Symantec unveils 'universal ID system'

Symantec said the goal is to create a universally accepted identity system across all Web sites -- from online financial institutions to retailers -- for millions of consumers. Continue Reading

By

• SearchSecurity.com Staff

McAfee: Malware all about ID theft

The use of keylogger technology is surging and there's been a 100-fold rise in phishing attacks, according to a new report from McAfee. Continue Reading

By

• Bill Brenner, Senior News Writer

ID theft victim to TJX customers: Mind your data

Customers should guard their own data, says one ID theft victim. Meanwhile, some in the banking industry say TJX may have stored more data than necessary. Continue Reading

By

• Bill Brenner

Review: Lancope StealthWatch 5.5 offers more than IDS

Hot Pick: StealthWatch goes far beyond traditional intrusion detection, with powerful network-monitoring features. The optional IDentity-1000 is an essential addition. Continue Reading

By

• Sandra Kay Miller, Contributing Writer

Identity and Access Management Security School

This Security School explores critical topics related to helping security practitioners establish and maintain an effective identity and access management plan. Continue Reading

Strong authentication for businesses large and small

Product review: Customer service could return calls more quickly when there's a problem. But overall, RSA SecurID Appliance 2.0 delivers robust, scalable protection. Continue Reading

By

• Phoram Mehta, Contributing Writer

How to survive a data breach

When Colin Crook offers advice on how companies should deal a security breach, he speaks from experience. He was CTO of Citicorp [now Citigroup, parent company of Citibank] 10 years ago when a hacker penetrated the company's network.

Crook is now senior advisor to the Wharton Fellows at the University of Pennsylvania, a member of the New York Academy of Sciences; fellow of the Royal Academy of Engineering and co-author of "The Power of Impossible Thinking." He shared his experiences with customers of Framingham, Mass.-based ID management firm Courion Corp. during the company's Converge05 conference last week. Business executives, he argues, must do better at listening to others and understand security is about humans, not machinery.

In the first of a two-part question-and-answer feature, Crook explains how companies can survive the fallout from a data heist.

 Continue Reading

By

• Bill Brenner

Who should be on (and off) the hook for ID theft?

An influential cryptographer and a panel of technologists today debate how best to fight false authentication and fraudulent transactions. Continue Reading

By

• Anne Saita, TechTarget

Are identities safer on laptops than central databases?

Microsoft pledges better ID security. Given the theft of a laptop storing 100,000 Social Security numbers, Redmond's approach could prove controversial. Continue Reading

By

• SearchSecurity.com Staff