Stories by Hamish Barwick

Google+

The state of data breaches

By Hamish Barwick | 27 March, 2013 11:44

The implications of data breaches can be severe for companies with potential financial losses and loss of customer trust.

Westpac email scam detected

By Hamish Barwick | 26 March, 2013 13:24

Westpac Banking Corporation has warned customers about a new hoax email and website doing the rounds.

ASIC blocks Global Capital Wealth websites

By Hamish Barwick | 22 March, 2013 14:41

The Australian Securities and Investments Commission (ASIC) has warned Australians not to deal with a company operating under the name Global Capital Wealth.

Youth Advisory Group on Cybersafety program unveiled

By Hamish Barwick | 18 March, 2013 12:39

The Youth Advisory Group (YAG) on Cybersafety program for 2013 has been launched with the first online discussion forum taking place with primary school students in the Northern Territory, South Australia and West Australia tomorrow.

AFP shuts down P2P child abuse network

By Hamish Barwick | 15 March, 2013 13:38

The Australian Federal Police (AFP) has arrested 21 people involved with a peer-to-peer child abuse file sharing network.

AFP takes cyber safety to the people

By Hamish Barwick | 14 March, 2013 11:36

A multi-faceted approach covering law enforcement, education and user vigilance is vital for cyber safety in Australia to succeed according to the Australian Federal Police (AFP).

Three Australian retailers sign with Visa CyberSource

By Hamish Barwick | 13 March, 2013 11:28

Visa subsidiary CyberSource has been selected by the Flight Centre, Cotton On and Kathmandu to secure online payments when customers are booking flights or buying apparel.

DSD signs Good Technology to secure iOS devices

By Hamish Barwick | 13 March, 2013 07:00

Mobile security company Good Technology has been certified by the Australian government’s Defence Signals Directorate (DSD) to protect iPhones and iPads used by government employees.

Reserve Bank of Australia confirms 2011 malware attack

By Hamish Barwick | 11 March, 2013 16:23

The Reserve Bank of Australia (RBA) has today confirmed that it was the victim of a targeted email-based virus attack in 2011 following an Australian Financial Review investigation.

Australia signs up to Europe Convention on Cybercrime

By Hamish Barwick | 05 March, 2013 08:37

Australia has become the 39th country to sign as a party to the Council of Europe Convention on Cybercrime meaning that local law enforcement agencies will be able to obtain data about cybercrime from international partner agencies.

Lack of BYOD policy putting enterprises at risk: IDC

By Hamish Barwick | 04 March, 2013 16:28

Companies could be exposing the crown jewels to malware and data breaches by not having a formal bring-your-own-device policy warns IDC Australia.

ABC hack a lesson for other companies: security experts

By Hamish Barwick | 01 March, 2013 12:29

The data breach of 49,500 audience usernames and hashed versions of passwords from the Australian Broadcasting Corporation (ABC) website Making Australia Happy should serve as a lesson for other companies that deal with personal information, according to security industry experts.

UPDATED: ABC confirms TV program website hack

By Hamish Barwick | 27 February, 2013 16:57

The Australian Broadcasting Corporation (ABC) has confirmed that a website related to the 2010 TV program Making Australia Happy was breached with 49,500 usernames and hashed versions of passwords leaked.

Harvey Norman apologises for $5 credit email

By Hamish Barwick | 25 February, 2013 14:49

Retailer Harvey Norman has issued an apologetic email after it accidently sent out customers a $5 credit offer for signing up to its VIP email, even though they had not opted in to receive it.

More DDoS attacks will be application based: Gartner

By Hamish Barwick | 25 February, 2013 10:14

Hackers are adapting distributed denial of service (DDoS) attacks and combining these with social engineering tactics to try and infiltrate banks during 2013, warns Gartner.

CSO Corporate Partners
  • Webroot
  • Trend Micro
  • NetIQ
rhs_login_lockGet exclusive access to CSO, invitation only events, reports & analysis.
CSO Directory

Authentication

RSA offers a wide range of strong two-factor authentication solutions to help organizations assure user identities and meet compliance requirements.

Security Awareness Tip

Incident handling is a vast topic, but here are a few tips for you to consider in your incident response. I hope you never have to use them, but the odds are at some point you will and I hope being ready saves you pain (or your job!).


  1. Have an incident response plan.

  2. Pre-define your incident response team 

  3. Define your approach: watch and learn or contain and recover.

  4. Pre-distribute call cards.

  5. Forensic and incident response data capture.

  6. Get your users on-side.

  7. Know how to report crimes and engage law enforcement. 

  8. Practice makes perfect.

For the full breakdown on this article

Security ABC Guides

Warning: Tips for secure mobile holiday shopping

I’m dating myself, but I remember when holiday shopping involved pouring through ads in the Sunday paper, placing actual phone calls from tethered land lines to research product stock and availability, and actually driving places to pick things up. Now, holiday shoppers can do all of that from a smartphone or tablet in a few seconds, but there are some security pitfalls to be aware of.