Front Page

News

Researchers find more versions of digitally signed Mac OS X spyware

By Lucian Constantin | 23 May, 2013 16:06

Security researchers have identified multiple samples of the recently discovered "KitM" spyware for Mac OS X, including one dating back to December 2012 and targeting German-speaking users.

IT security vendors seen as clueless on industrial control systems

By Antone Gonsalves | 23 May, 2013 13:50

Even the most innocuous security processes used for traditional IT systems could spell disaster in an ICS

Nation's power grid under constant cyberattack, but Congress lax

By John P. Mello | 23 May, 2013 13:49

Utilities' cyber defense efforts said to be rapped by legislators, Congressional report finds

AusCERT 2013: What's it like to be a 'Nigerian scam' victim?

By Hamish Barwick | 23 May, 2013 13:09

Feelings of shame and despair at being conned out of $300,000 by a convincing Nigerian based email scam led Queensland interior decorator Jill Ambrose to attempt suicide twice.

SoftBank said to be in talks with US to allay national security fears

By John Ribeiro | 23 May, 2013 06:55

The U.S. government is in negotiations with SoftBank for greater control over equipment purchases by Sprint Nextel and the selection of one of the Japanese company's nominee to the U.S. carrier's board, according to a news report.

Reviews

SafeWallet makes password storage pretty easy

By Liane Cassavoy | 15 May, 2013 19:47

I love password managers. When they work well, they make browsing the Web easier, faster, and more secure. And SafeWallet does, indeed, work well. It's not perfect, but SafeWallet has become my new favorite password manager.

Hide your programs from prying eyes with WinLock

By Mark O'Neill | 02 May, 2013 23:32

Anyone who works in an office will know that when it's time to run to the bathroom, the chances of someone snooping around the computer increases. Whether it's a nosy colleague looking for gossip or a boss checking up on your work, no one wants to be caught out checking Facebook on company time. That's where a small program called WinLock comes in to save you.

Cisco edges F5 in VPN shootout

By Susan Perschke | 22 April, 2013 14:04

Connecting remotely to network servers is a fact of life for millions of end users. Whether working from a PC or a mobile device, users rely on secure, reliable remote connections to maintain their productivity.

Microsoft DirectAccess impresses

By Susan Perschke | 22 April, 2013 10:57

Available since Windows Server 2008 R2, Microsofts DirectAccess server role became fully integrated with the OS in Windows Server 2012. DirectAccess is designed to connect a VPN-type session automatically as soon as a compatible Windows client is connected to the Internet.

Java security questions answered

By Susan Perschke | 22 April, 2013 10:57

Most of the products tested (except Windows Server 2012), use Oracle's Java in one form or another, at least for client access and also in some cases within the management interface. With numerous vulnerabilities recently discovered in Java, leading to guidance from Department of Homeland Security and others to disable it entirely, this raised some questions about usability and possibly even security of the devices tested.

Slideshows

In pictures: AusCERT 2013 Day One

By Computerworld Staff | 22 May, 2013 15:10

The annual AusCERT conference began on the Gold Coast with an invasion by some friendly storm troopers. Delegates heard insights from Google, the Department of Environment and Queensland Police Service. The conference continues until Friday.

In pictures: AISA National Conference 2012 Awards

By Ian Sharp | 17 October, 2012 11:41

AISA held its first ever National Conference dinner and awards ceremony as part of its program for 2012. Five awards including Rookie of the Year, Team of the Year, Project of the Year, Employer of the Year and Professional of the Year were given out by sponsor CBA.

In pictures: AISA National Conference 2012

By Ian Sharp | 17 October, 2012 11:38

AISA's annual National Conference took place in Sydney this week with 750 AISA members attending to hear insights from speakers including Oracle's CSO, Mary Ann Davidson, and Google Enterprise director of security, Eran Feigenbaum. A gala dinner was held for the first time with five security awards, sponsored by CBA, presented to industry professionals and groups.

In pictures: Cyber Security Summit 2012 day one

By Hamish Barwick | 01 August, 2012 15:59

The first day of the Cyber Security Summit 2012 kicked off in Sydney. Delegates heard from a wide variety of speakers ranging from the Australian Federal Police (AFP) assistant commissioner to security architects. The Summit continues until Friday.

In pictures: iOS vs Android Hackathon event

By Lisa Banks | 22 November, 2011 13:42

Melbourne’s iOS vs Android Hackathon event was held last weekend in Melbourne, with developers battling it out for $10,000 and more in prizes.

Features

The true root causes of software security failures

By Kenneth van Wyk | 21 May, 2013 20:56

Developers being overly trusting is one of them.

Chinese hackers master art of lying low

By Jaikumar Vijayan | 20 May, 2013 10:14

China's remarkable success in infiltrating U.S. government, military and corporate networks in recent years shouldn't be seen as a sign that the country is gaining on the U.S. lead in cybertechnology, security experts say. They're just very persistent and very good at remaining undetected for long periods of time.

8 essential features you need in a business router

By Eric Geier | 17 May, 2013 15:56

A router is the heart of your network, so it deserves to be chosen carefully. Any router will share your Internet connection amongst your computers and other networkable devices (smartphones, tablets, and so on), but better models provide features that will enhance your network and its performance. Whether you're seeking a business- or consumer-class router, here are the eight most essential features to look for.

Tech Titans Talk: The IDG Enterprise Interview Series

By CIO | 17 May, 2013 14:15

In the IDG Enterprise Interview Series, you'll hear from technology CIOs and CEOs on today's burgeoning trends, ongoing headaches and upcoming product plans. Check out this informative series from IDG Enterprise Chief Content Officer John Gallant and his team of editors.

State social media privacy laws a mixed bag for businesses

By Jaikumar Vijayan | 15 May, 2013 10:10

New social media privacy laws that have been enacted in several states around the country, or are in the works, present something of a mixed bag for businesses.

Tutorials

Designing your digital legacy

By David Daw | 29 April, 2013 12:53

We lead rich virtual lives on social networking sites like Google+, Facebook, and Twitter. So what happens when real life catches up, and our flesh-and-blood bodies succumb to mortality? For our virtual selves, at least, some concrete answers are available--ways to settle our digital affairs after death, while minimizing hassle and heartache for loved ones.

How to Recover From a Twitter Hack

By Kristin Burnham | 25 April, 2013 18:20

Do you know what to do if your Twitter account is hacked? Here are four steps to take to regain control of your account and ensure it doesn't happen again.

How to track a lost computer with Find My Mac

By Serenity Caldwell | 19 April, 2013 14:53

If your computer is stolen or otherwise liberated from your possession, don't despair: If you've remembered to enable Find My Mac, you can track it, remotely lock it, and even send messages to your Mac's screen.

How to enable Family Safety features in Windows 8

By Rick Broida | 15 April, 2013 21:37

The Internet? Kind of a cesspool. And as the parent of kids who are now old enough to operate a Web browser, you can bet I'm keen on checking their activities and filtering out the inappropriate content.

Windows 8 picture passwords: Their great untapped potential

By Alex Wawro and Marco Chiappetta | 22 February, 2013 17:20

Love it or hate it, Windows 8 is the bellwether for PCs. Where Microsoft goes, PCs follow. And now Microsoft is making a grab for the mobile market, too. The latest version of Windows is designed with touchscreens in mind, and one bright side of that evolution is the addition of features that make Windows more intuitive and easier to use on all devices.

Guides

Single sign-on moves to the cloud

By David Strom | 17 December, 2012 15:23

We are awash in passwords, and as the number of Web services increases, things are only going to get worse. Trying to manage all these individual passwords is a major problem for enterprise security. Many end users cope by re-using their passwords, which exposes all sorts of security holes.

Can You Trust Your Browser With Your Passwords?

By Eric Geier | 23 August, 2012 13:40 | 3 Comments

Having your Web browser remember your passwords and/or credit card details can be convenient, but it poses some security risks. How much of a risk depends on which browser you’re using, whether you sync with other devices, and whether you’re using any of the browser's extra security features. Here are the main vulnerabilities in some of the most popular browsers—Internet Explorer, Google Chrome, and Mozilla Firefox—and ways you can protect against those weak spots.

Protect Your Assets: A Buying Guide to Office Security Systems

By Michael Brown | 31 July, 2012 12:53 | 3 Comments

We talk frequently about cybersecurity, discussing how to protect your business's data by using strong passwords, deploying antimalware utilities, and keeping your computers safe with the latest patches and updates. This time, the focus is on premises security, or protecting your business's physical assets from burglary and vandalism.

Antivirus on Windows 8: Looking at Your Options

By Eric Geier | 26 July, 2012 14:21

Microsoft will include antivirus in Windows 8 for the first time in the history of Windows. But will this software--the new version of Windows Defender--provide adequate protection against viruses, spyware, and other malware? Let's take a closer look at what Windows Defender provides, and whether its features are enough to keep you safe.

Opinions

Why you need a security buddy (and how to find one)

By Michael Santarcangelo | 22 May, 2013 15:00

At a school event, I noticed my son sitting and talking with a younger boy. When I asked who he was, my son explained, "he's my kinder buddy!"

Don't let IT foul the nest

By Michael Foreman | 21 May, 2013 18:37

"Well, I'm not having them in my house," was the immediate and somewhat indignant verdict on the Google Glass concept from a not too tech-savvy friend. I had just given her a run down on some of the possible Google Glass features and how the device might be abused by a gatecrasher to gain entry to a party for example.

Steven J. Vaughan-Nichols: Google Glass will be a big deal, so deal with it

By Steven J. Vaughan-Nichols | 20 May, 2013 10:14

Some people are having fits about Google Glass. True, it will change how we think about privacy in public places, but such rethinking started years ago.

Florida's identity-theft rate dwarfs others

By Paul McNamara | 20 May, 2013 06:20

Sure, the headline gives away the answer, but if you had been asked to guess which state has the highest rate of reported identity theft you'd likely have chosen Florida: A large population of vulnerable retirees and a generally high crime rate all but guarantee the distinction.

The Macalope: He's an ideas guy

By The Macalope | 16 May, 2013 19:17

Hey, who likes Apple acquisition fan fiction?!

CSO Corporate Partners
  • Webroot
  • Trend Micro
  • NetIQ
rhs_login_lockGet exclusive access to CSO, invitation only events, reports & analysis.
CSO Directory

Sophos SafeGuard Enterprise

Your central key for data protection

Security Awareness Tip

Incident handling is a vast topic, but here are a few tips for you to consider in your incident response. I hope you never have to use them, but the odds are at some point you will and I hope being ready saves you pain (or your job!).


  1. Have an incident response plan.

  2. Pre-define your incident response team 

  3. Define your approach: watch and learn or contain and recover.

  4. Pre-distribute call cards.

  5. Forensic and incident response data capture.

  6. Get your users on-side.

  7. Know how to report crimes and engage law enforcement. 

  8. Practice makes perfect.

For the full breakdown on this article

Security ABC Guides

Warning: Tips for secure mobile holiday shopping

I’m dating myself, but I remember when holiday shopping involved pouring through ads in the Sunday paper, placing actual phone calls from tethered land lines to research product stock and availability, and actually driving places to pick things up. Now, holiday shoppers can do all of that from a smartphone or tablet in a few seconds, but there are some security pitfalls to be aware of.