The annual report from IBM’s X-Force security operation shows what many IT managers have suspected for some time, namely that Web application vulnerabilities represent the major risk for most organisations.

On Saturday, Google users were warned that all their search results were potentially harmful, due a widespread result of human error.

If you’ve had a high company phone bill recently, spare a thought for Martin & Hillyer, a law firm in Burlington, Ontario.

ISACA, the Information Systems Audit and Control Association, has developed a new business model for IT security.

‘NASA hacker’ Gary McKinnon has won permission from the High Court to apply for a judicial review against his extradition to the United States.

Here’s a lesson in IT contingency planning, courtesy of Deutsche Bahn, the German railway network company, whose IT systems – including station indicator boards, electronic ticketing, self-service counter tickets and Internet pages – all went off line …

Overclockers.co.uk (OCUK), an online computer hardware reseller firm, have announced they are placing a bounty of £10 000 on the heads of hackers behind a Distributed Denial of Service (DDoS) attack on their web site earlier in the month.

The UK government’s Infosec Training Paths and Competencies (ITPC) scheme is to transfer to the Institute of Information Security Professionals (IISP) with effect from 1 April 2009.

According to his lawyer, Karen Todner, Gary McKinnon, who may be facing extradition after confessing to hacking into US military computers, was told yesterday that the UK High Court would delay his hearing until the director for public prosecutions had…

Two new botnets have emerged in the past few weeks, and at least one shows signs of being an upgrade to a previous botnet that wreaked havoc in the wild.