Nobody doubts that BYOD is a security issue – the connection of employees’ personal devices to the corporate network worries IT staff. There are security solutions; but study after study surprisingly shows that many companies simply ignore the problem …
Cutwail spamming out Andromeda – using Qantas as the lure
A current spam campaign from the Cutwail botnet is sending out the Andromeda bot loader (aka Gamarue) which subsequently downloads the Zeus banking trojan. Numerous spam themes are employed, including flight/ticket details, courier, tax, hotel, payroll…
CREST launches CRESTx at Lancaster university
CREST is the council for registered ethical security testers, a standards based organisation that provides assurance and trust in penetration testers and ethical hackers. On 3 July 2013 it is running its first CRESTx conference at Lancaster university,…
Phishing targets UK businesses 3,000 times per day
Phishing attacks are evolving, and becoming more widespread over time: Kaspersky Lab has found that 3,000 UK internet users were subjected to phishing attacks each day for the past year, a notable increase from 1,000 the year before.
Google adds phishing and malware levels to Transparency Report
Google, which flags 10,000 unsafe websites each day, has expanded its Transparency Report to add a section that will shed more light on the sources of malware and phishing attacks.
(ISC)² kicks off Women in Security mentoring program
Women in Security (WiS), a special interest group led by (ISC)²’s London Chapter, is launching a mentoring scheme to help women interested in information security to explore the profession and the opportunities its offers.
‘Hidden’ SOCA Report Shows UK Businesses Regularly Hack Rivals
The Independent has claimed that a report produced and suppressed by the Serious Organized Crime Agency demonstrates that law firms, telecoms giants and insurance companies routinely hire criminals to steal rivals’ information.
Fake anti-virus jumps from PCs to Android
A fresh ransomware scheme is plaguing Android users by way of the well-known FakeAV malware, which has now made the leap from computers to mobile devices.
ATM-like cryptology aims to banish IDs and passwords
Finding a clever way to eliminate the use of passwords and user IDs entirely in a way that offers airtight security is, naturally, an identity technologist’s Holy Grail. CertiVox is the latest security Parsifal, debuting the open-source M-Pin Strong Au…
Bitcoin Foundation told to cease and desist
The Bitcoin Foundation has received a cease and desist letter from the California Department of Financial Institutions, alleging that it may be engaged in money transmissions without the requisite state license.