Trustwave Acquires Application Security Inc

Trustwave, a Chicago-based firm with a wide range of security offerings and a particular specialism in data protection, has bought privately held New York-based Application Security Inc, a specialist in database security. The acquisition is complete, a…

Read More >>

Waking Shark II – Stress Testing the City of London

Today is Waking Shark II day – the day the City of London’s cyber resilience is tested in a day long exercise. Details are scarce (it wouldn’t be a test if they were known) but the war game is expected to concentrate on the ability of banks to maintain…

Read More >>

APTs and the Moriarty of Cybercrime

Researchers have analyzed 11 apparently distinct APT campaigns, and have come to the conclusion that they are not as distinct as previously thought – in short, there’s a malware quartermaster, a Moriarty of cybercrime, serving multiple threat actors.

Read More >>

PCI DSS Version 3.0 Goes Beyond Compliance

The PCI Security Standards Council (PCI SSC) has published version 3.0 of the PCI Data Security Standard (PCI DSS) and Payment Application Data Security Standard (PA-DSS) for debit and credit card security, geared to move organizations from mere compli…

Read More >>

How GCHQ hacked Belgacom

In September Der Spiegel published details from Snowden leaks indicating that GCHQ had been behind the hacking of Belgian telcommunications company Belgacom, in an operation codenamed Op Socialist. On Friday it published further details indicating how …

Read More >>

Adobe Breach is Far, Far Worse than Originally Thought

After Brian Krebs gave Adobe a strong hint that it had been breached, the company announced that just short of three million accounts may have been compromised. It later upped this to 38 million – but it now appears that the true figure is around 150 m…

Read More >>