A data breach at Bay House School in Hampshire has highlighted the importance of not using the same password for different websites and applications, say experts.
New CSA registry enables cloud providers to demonstrate security controls
Cloud providers can demonstrate their adherence to industry-standard security practices by applying for listing in the Cloud Security Alliance’s (CSA) new Security, Trust and Assurance Registry (STAR).
Future of SSL in doubt? Researcher Marlinspike unveils alternative to certificate authorities
Noted security researcher and hacker Moxie Marlinspike slammed the certificate authorities at last week’s Black Hat conference in Las Vegas, just before he introduced his own alternative for authenticating secure web communications.
Black Hat 2011: Security researchers hack iPad dongle to become card skimmer
At the Black Hat 2011 event, which has just finished in Las Vegas, security researchers have shown how it is possible to hack a dongle for the iPad – which was originally designed to allow iPads to accept debit and credit card payments – to become a ca…
Trojanised Android app seen checking for keywords in text messages
A threat analyst with Trend Micro claims to have spotted a trojanised Android app in the wild that checks for keywords in text messages, and relays the data back to remote hackers.
Dell SecureWorks says 60 families of APT malware traced back to China
After researching the growing problem of APTs (Advanced Persistent Threats) – a security issue first discovered by StoneSoft late last year – Dell SecureWorks claims to have revealed around 60 different types of families of custom malware that use APTs…
DefCon 19: 10-year-old code cracker reveals zero-day smartphone gaming security flaw
A 10-year-old code cracker taking part in the first Defcon kids event over the weekend – part of the DefCon 19 event that has just taken place in Las Vegas – has reportedly discovered a zero-day flaw in the way the iOS and Android smartphone/tablet ope…
US standards body issues warning to energy suppliers over cyber attacks
A US energy industry standards body has warned suppliers to improve their defences against cyber attacks.
Anonymous hacker group publishes data stolen from US police departments
Hacktivist group Anonymous and its offshoot LulzSec have published information stolen from rural US police departments in revenge for recent law enforcement actions.
California adopts nation’s first privacy and security rules for smart grid customer data
The California Public Utilities Commission (CPUC) has adopted the first privacy and security protections for customer data on smart grid electricity networks in the US.