Gathering More Security Data From Your Endpoints
A posting from Dark Reading in there Endpoint Security section: Even though many of the most troublesome and advanced threats hitting enterprise networks originate from the endpoint, most organizations today aren't investing in the same kind of visibility and control over these devices as they spend on network-based controls. This disparity is leaving organizations with […]
Anatomy of a change - Google announces it will double its SSL key sizes
A posting from Naked Security on Google announces it will double its SSL key sizes: Google just announced that its HTTPS web pages will be ditching 1024-bit RSA keys in favour of 2048 bits. "Pah," I hear you say. "I have one or two questions about that - three questions, in fact." How is this newsworthy when many […]
Phishers try flattery with Facebook Page owners
An interesting article in Naked Security on Phishers try flattery with Facebook Page owners: Beware, fanboys and fangirls: phishers are targeting Facebook Page owners with a bogus message supposedly sent from Facebook Security. According to Hoax-Slayer, the scam claims that Facebook is rolling out a new security feature to protect Page owners. This supposed new security feature is dubbed the "Fan […]
Focused Black Hat 2013 Trainings Examine Incident Response, Malware
A posting from Dark Reading In there Security management section: Verizon's 2013 DBIR indicates that 40% of breaches involved malware, and rapid analysis often falls to incident responders. Malware Analysis: Black Hat Edition provides a rapid intro to the tools and methodologies of Windows malware analysis. Attendees will learn how to observe malware's actions through disassembly and debugging, extract host […]
BIOS Bummer: New Malware Can Bypass BIOS Security
A posting from Dark Reading in there Vulnerability and Threat section: As more hardware vendors seek to implement the new NIST 800-155 specification that was designed to make the start-up BIOS firmware on our PCs and laptops more secure, they may need to rethink the security assumptions upon which the standard depends. A trio of researchers from […]
Twitter launched "Login Verification" feature after the Non-Stop Hijacking of accounts by Pro-Assad Hackers
Twitter launched "Login Verification" feature after the Non-Stop Hijacking of accounts by Pro-Assad Hackers
10,000 Facebook accounts hacked by Hackers through distributed Malicious links
Hackers always in search for some tricks to hijack social media accounts but now hackers pointed out a city in INDIA (Jaipur City).
NYPD detective charged with hiring email hackers to break into colleagues' personal accounts
New York City police have arrested a NYPD detective for hiring an email hacking service to pinch the login details for at least 43 personal email accounts and one cell phone belonging to at least 30 individuals. Edwin Vargas, 42, of Bronxville (a part of New York City), is accused of having paid $4,050 via […]
Why Twitter's two-factor authentication isn't going to stop media organisations from being hacked
A posting from Naked Security on Why Twitter's two-factor authentication isn't going to stop media organisations from being hacked: Twitter has announced the availability of two factor authentication (2FA) for its service, meaning that users can opt-in to something stronger than just a username and password to protect their accounts. In a blog post, Twitter explains how the […]
Controlling The Risks Of Vulnerable Application Libraries
A posting from Dark Reading in there Application Security section: During the past decade, developers have increasingly leaned on third-party components, such as open-source libraries, to dramatically lighten the load during coding. These components can help reduce time spent adding basic or universal features and functions so that developers can focus their work on the innovative […]