Stories by Ed Oswald

Facebook's Recommendations Bar: A Privacy Concern?

By Ed Oswald | 26 July, 2012 23:22

Facebook has rolled out a new feature called the Recommendations Bar for website owners. The Recommendations Bar allows website owners to tap into the social network's database of what you and your friends read, share, and like.

$50 Hacking Device Opens Millions of Hotel Room Locks

By Ed Oswald | 24 July, 2012 21:03

If you're staying at hotel, it might be a good idea to check the manufacturer of your door lock. A black hat hacker has unveiled a method that allows a fairly simple hardware gadget to unlock door locks manufactured by Onity.

Music Site Last.fm Joins the Password-Leak Parade

By Ed Oswald | 08 June, 2012 00:31

Music site Last.fm is investigating a security breach involving the leak of some user passwords, the site said Thursday. The admission is the third in two days, following similar news from social networking site LinkedIn and dating site eHarmony on Wednesday.

U.S. Government Regularly Asks Google for Users' Data

By Ed Oswald | 28 June, 2011 07:47

Not only does the U.S. government regularly request users' private data from Google, it does so more often than any other government, the search engine reported Monday. Google announced these details as part of its Transparency Report, a bi-annual disclosure of what governments worldwide are asking for.

Hack Attacks Escalating? Here's a Reality Check

By Ed Oswald | 23 June, 2011 04:06

Hack attacks from online thugs such as Anonymous and LulzSec appear to signal a hacker Armageddon. Not only has Sony been relentlessly targeted by hackers this year so has the Central Intelligence Agency, Sega, PBS.com, the U.K. government, and dozens of other high-profile company and government agency Web sites.

Has LulzSec gone too far?

By Ed Oswald | 17 June, 2011 06:28

They say they're doing it for the "lulz," but there comes a point when it's no longer funny. The latest LulzSec targets are the CIA as well as 62,000 e-mail account holders using web-based services, including Comcast, Yahoo Mail, Hotmail, and Gmail.

Congress aims to curb mobile location tracking

By Ed Oswald | 16 June, 2011 07:08

Minnesota Sen. Al Franken is one of most vocal politicians in Washington when it comes to the issue of mobile privacy. In April, he sent letters to both Apple and Google asking if and how they collect location data on their users.

Google Music scams appearing already

By Ed Oswald | 13 May, 2011 06:35

Google Music service has only been in existence for a matter of days, and it's already the target of scams and spams. In all cases however, any claims of free music or access to the site is false, Google says.

Facebook users lax on privacy, protecting children online

By Ed Oswald | 11 May, 2011 06:35

Facebook users still do not use privacy controls to protect themselves, and a third of children under 18 are below the site's minimum age of 13, Consumer Reports reported in its June issue.

Attackers use Google image search to distribute malware

By Ed Oswald | 07 May, 2011 07:03

Attackers are now using Google's image search to distributed malware, security experts say. Thousands of sites have reportedly been compromised by code injection -- the malicious code redirects users to fake antivirus applications.

Sony shifts blame back to Anonymous for PSN attack

By Ed Oswald | 06 May, 2011 08:59

In a response to a congressional inquiry into the hack of the PlayStation Network, Sony appears to have shifted the blame back to the hacktivist group Anonymous.

Google tracks you too, internal e-mails show

By Ed Oswald | 02 May, 2011 08:40

A series of internal e-mails from last year highlights how important location data is to Google, and likely gives more ammunition to privacy advocates over how these companies track your every move.

CSO Corporate Partners
  • Webroot
  • Trend Micro
  • NetIQ
rhs_login_lockGet exclusive access to CSO, invitation only events, reports & analysis.
CSO Directory

Endpoint Encryption

Robust data protection for PCs, smartphones, and removable media

Security Awareness Tip

Incident handling is a vast topic, but here are a few tips for you to consider in your incident response. I hope you never have to use them, but the odds are at some point you will and I hope being ready saves you pain (or your job!).


  1. Have an incident response plan.

  2. Pre-define your incident response team 

  3. Define your approach: watch and learn or contain and recover.

  4. Pre-distribute call cards.

  5. Forensic and incident response data capture.

  6. Get your users on-side.

  7. Know how to report crimes and engage law enforcement. 

  8. Practice makes perfect.

For the full breakdown on this article

Security ABC Guides

Warning: Tips for secure mobile holiday shopping

I’m dating myself, but I remember when holiday shopping involved pouring through ads in the Sunday paper, placing actual phone calls from tethered land lines to research product stock and availability, and actually driving places to pick things up. Now, holiday shoppers can do all of that from a smartphone or tablet in a few seconds, but there are some security pitfalls to be aware of.