Data Protection — News

Researcher teaches computers to detect spam more accurately

By Nicolas Zeitler | 11 August, 2011 08:08

Without spam detection many of us would spend hours managing the daily load of e-mails. Nina Balcan develops machine learning methods that could be used to develop personalized automatic programs for deciding whether an e-mail is spam or not. For her efforts, the computer scientist from the Georgia Institute of Technology has just been awarded with a Microsoft Research Faculty Fellowship.

Cloud architecture: More questions to ask a provider

By Gregory Machler | 11 August, 2011 03:16

This is a continuation of the previous cloud deployment article where I created architectural questions that enable a consultant to understand what products are used to support a corporation's top 10 critical applications. Once these product lists are created, it is much easier to map private or public cloud products that can support these same applications.

Anonymous allegedly threatens to 'kill' Facebook

By Jeremy Kirk | 10 August, 2011 23:36

The hacking group Anonymous is allegedly threatening to "destroy" Facebook on Nov. 5, accusing the social networking site of spying on users, cooperating with authoritarian governments and abusing people's privacy.

Cyber attacks drive demand for network security staff

By Anh Nguyen | 10 August, 2011 20:02

The increase in cyber attacks has driven a growth in demand for network security staff, according to a report into the information security jobs market.

Booz Allen CEO downplays effect of Anonymous hack

By Robert McMillan | 10 August, 2011 11:13

A July cyberattack on Booz Allen Hamilton will not materially harm the company's bottom line, its CEO said Tuesday.

Microsoft's BlueHat goal: Kill bugs dead

By George V. Hulme | 10 August, 2011 05:52

Bug bounty programs are designed to reward security researchers for finding flaws in a vendor's product that have made it past their own quality processes. Some organizations, such as Google and Mozilla, have had bug bounty programs in place for a time, while social networking site Facebook just announced a bug bounty program with a base reward of $500.

Microsoft: five disclosed flaws likely exploited next month

By Liam Tung | 10 August, 2011 09:44

Microsoft has released 13 security updates for its August Patch Tuesday update, five of which it considered likely to see reliable exploits developed for within the next 30 days.

BlackBerry Blog hacked for helping police quell riots

By John P. Mello Jr. | 10 August, 2011 03:47

Hackers defaced the official Blackberry Blog today in retaliation for Research In Motion's pledge to assist police "in any way we can" in their efforts to quell the riots in London in recent days.

App makers may be exposing your sensitive data to hackers

By Megan Geuss | 10 August, 2011 00:13

Some popular apps store sensitive data such as user names and passwords and credit card information in plain text on your phone's memory, making the data an easy target for hackers. A Chicago-based mobile forensics company called viaForensics recently found as much after completing an audit of dozens of the most popular apps on both iOS and Android platforms.

Anonymous group defaces Syrian Government website

By John E Dunn | 09 August, 2011 23:59

The Anonymous hacking group has added the website of the Syrian Ministry of Defense to its ever-lengthening list of victims, defacing it with a message in support of the anti-Government insurrection.

Thousands of pupils’ personal data at risk in website hack

By Anh Nguyen | 09 August, 2011 23:02

The Information Commissioner's Office (ICO) has found a school in Hampshire in breach of the Data Protection Act (DPA) after the personal details of nearly 20,000 people were put at risk when the school's website was hacked.

Taiwan political party accusses China of hacking

By Michael Kan | 09 August, 2011 20:16

A Taiwanese political party suspects the Chinese government is behind a hacking attack that stole information about the party's election activities.

Cloud computing: 4 tips for regulatory compliance

By Jim Buchanan | 09 August, 2011 09:48

Cloud computing seems simple in concept, and indeed, simplicity of operation, deployment and licensing are its most appealing assets. But when it comes to questions of compliance, once you scratch the surface you'll find more questions than you asked in the first place, and more to think about than ever before.

Optus Business SmartPay awarded PCI DSS compliance

By Lisa Banks | 09 August, 2011 12:56

Optus has been awarded PCI DSS compliance for its Business SmartPay system, making it the first telco to achieve such a status in Australia and New Zealand.

Polymorphic threats cause pain for traditional anti-virus: Symantec

By Stilgherrian | 09 August, 2011 13:04

The volume of email containing polymorphic malware -- malicious software that can change its characteristics to evade detection by anti-virus defences -- has increased dramatically, according to security vendor Symantec.

'Watchmen' Author Supports WikiLeaks Whistleblower

By John P. Mello Jr. | 09 August, 2011 08:08 | 7 Comments

In what appears to be a ramp-up of celebrity support, famous graphic novel author Alan Moore Monday issued a statement in praise of PFC Bradley Manning. Manning is the G.I. accused of leaking classified U.S. government documents to WikiLeaks.

Defcon for Kids Raising a New Generation of 'Hackers'

By Tony Bradley | 09 August, 2011 04:12

At the Defcon conference in Las Vegas last week, kids aged 8 to 16 were exposed to the world of hacking. Some may fear indoctrinating a new generation of Anonymous and LulzSec members, but young minds can expand the horizons of technology and computer security to effectively combat hacking collectives such as these.

EMC expects RSA breach to cost US$81.3 million

By Liam Tung | 09 August, 2011 06:54

EMC has squirrelled away US$81.3 million in reserve to cover the cost of customer remediation in response to the attack on RSA’s SecurID system it revealed in March.

Defcon: The security penetration testing quagmire

By Tim Greene | 08 August, 2011 23:38

LAS VEGAS -- The relationship between CISOs and security penetration testers is anything but clear-cut and raises ethical issues for both parties, a Defcon crowd heard from a former CISO.

10-Year-Old Outs Security Flaw in iOS and Android Games

By Matt Peckham | 08 August, 2011 23:33

A 10-year-old California hacker just figured out what a bunch of developers apparently couldn't: How to hack various mobile phone and tablet based games by simply fiddling with the clock. And she just told all at the first annual DefCon Kids hacker conference—a subset of DEFCON, the self-identified "world's longest running and largest underground hacking conference"—which wrapped yesterday in Las Vegas.

CSO Corporate Partners
  • Webroot
  • Trend Micro
  • NetIQ
rhs_login_lockGet exclusive access to CSO, invitation only events, reports & analysis.
CSO Directory

Dynamic Threat Intelligence

The FireEye Dynamic Threat Intelligence cloud interconnects FireEye appliances deployed within customer networks, technology partner networks, and service providers around the world.

Security Awareness Tip

Incident handling is a vast topic, but here are a few tips for you to consider in your incident response. I hope you never have to use them, but the odds are at some point you will and I hope being ready saves you pain (or your job!).


  1. Have an incident response plan.

  2. Pre-define your incident response team 

  3. Define your approach: watch and learn or contain and recover.

  4. Pre-distribute call cards.

  5. Forensic and incident response data capture.

  6. Get your users on-side.

  7. Know how to report crimes and engage law enforcement. 

  8. Practice makes perfect.

For the full breakdown on this article

Security ABC Guides

Warning: Tips for secure mobile holiday shopping

I’m dating myself, but I remember when holiday shopping involved pouring through ads in the Sunday paper, placing actual phone calls from tethered land lines to research product stock and availability, and actually driving places to pick things up. Now, holiday shoppers can do all of that from a smartphone or tablet in a few seconds, but there are some security pitfalls to be aware of.