Physical Security — News

CS-Cart v3.0.4 has PayPal ‘buy without paying’ glitch

By Liam Tung | 25 February, 2013 10:22

E-commerce merchants using shopping cart software CS-Cart version 3.0.4 and earlier are vulnerable to a flaw that allows fraudsters to buy goods without paying for them.

Oz watchdog eyes whitelisting as “reasonable” privacy measure

By Liam Tung | 07 December, 2012 07:34

Enterprise information security in Australia could come under much greater scrutiny with the nation’s Information Commissioner looking to drill down deeply into the details of an organisation’s security practices after a breach.

Week in security: FreeBSD hacked as Facebook, Adobe redouble security efforts

By David Braue | 28 November, 2012 10:08

Smart meters have long been a contentious issue in Australia and elsewhere, but some researchers warn that they're broadcasting unencrypted usage information that could be used to figure out whether you're at home or not.

Social engineer whiz kid Cosmo gets six-year Internet ban

By Liam Tung | 12 November, 2012 11:06

Cosmo, the 15 year-old member of the hacking crew UG Nazi began a six-year Internet lock down this week after striking a plea bargain over a host of crimes, including an international credit card fraud bust led by the FBI last year that extended to Australia.

Aussie drug prescriptions sit pretty for health fraud

By Liam Tung | 29 May, 2012 11:13

Drug dealers that sell prescription steroids, opioids and other “Schedule 8” controlled drugs, are exploiting the lack of consistency in legitimate Australian prescription documents, according to a Queensland Health investigator.

Exactly what is Homeland Security watching for on Facebook, Twitter, YouTube?

By Michael Cooney | 17 February, 2012 06:29

The idea that any number of federal institutions are watching your every move on social networks like Facebook, Twitter is unnerving at best. The Department of Homeland Security is one of those agencies and today it testified before a House subcommittee to define and defend its role in social media monitoring.

Researchers crack satellite encryption

By Ellen Messmer | 09 February, 2012 09:27

Researchers at a university in Bochum, Germany claim to have cracked encryption algorithms of the European Telecommunications Standards Institute (ETSI) that are used to secure certain civilian satellite phone communications.

Security Manager's Journal: Should physical security belong to us?

By J.F. Rice | 03 February, 2012 08:22

I've always wanted to be responsible for physical security. I never understood why the security of computers, networks and data is managed by a different department than the security of doors, windows and cameras. The same principles apply in both worlds. And let's face it: Physical security is actually run on computers. So I think it's perfectly natural for information security to own it.

Carrier IQ security risks overblown?

By George V. Hulme | 08 December, 2011 02:37

While we wait for the final judgment on the privacy implications of the Carrier IQ fiasco, security pros are asking what the potential security implications of the embattled mobile diagnostic software could be.

Cyber-thieves using DDoS to distract banks and victims from spotting fraud

By Lucian Constantin | 06 December, 2011 05:09

Cyber-thieves are using distributed denial-of-service (DDoS) attacks in order to distract banks from spotting and reversing fraudulent wire transfers initiated on behalf of their customers.

The typical fraudster - the threat from within.

By Andrew Glassock | 22 November, 2011 14:30

Speaking in Sydney last week at The Attachmate Group, Inc’s customer briefing “ A Powerful Connection 2011”, Stan Gallo, Associate Director, KMPG Forensic gave an overview of the latest global research into the typical fraudster, the incidence of fraud and identity theft in Australia.

Barack Obama’s security circus arrives in Oz: In Pictures

By Neerav Bhatt | 18 November, 2011 09:18

After jumping through countless hoops to get the required set of security clearances and approval by the US Embassy to photograph the President’s visit CSO can see why these steps were justified.

Our photojournalist Neerav Bhatt was less than 5 metres away from the world’s most heavily secured individual - the President of the United States of America, Barack Obama.

Lethal medical device hack taken to next level

By Stilgherrian | 21 October, 2011 10:02 | 5 Comments

The wireless hacking of a medical device, first demonstrated at the Black Hat 2011 conference in August, has been taken a step further. An insulin pump has been hacked and instructed to deliver a lethal dose without first knowing the device's ID number.

Destroying data to protect against fraud

By Neerav Bhatt | 18 October, 2011 07:39

Destroying data to protect against fraud.

Ex-CIA boss "in awe" of Chinese hackers as RSA boss defends SecurID attack

By Liam Tung | 05 October, 2011 08:54

Despite claims the phishing email that netted RSA’s staff in its SecurID breach was a crude example of social engineering, RSA boss Art Coviello insists it was highly sophisticated and would have fooled even the most skilled PC operator.

Biometrics scares most people

By Ellen Messmer | 03 October, 2011 21:32

Biometrics — the security method for identifying an individual by making a match of fingerprints, iris, face, voice, DNA and other unique physical traits — scares people, an industry leader in the field acknowledged this week. But enterprise technology managers say there's no doubt biometrics is a boon to enterprise security.

Prototype "Rapid DNA" technology exhibited; could bolster forensic investigations

By Ellen Messmer | 30 September, 2011 03:57

TAMPA --  Using a portable kit to be able to quickly analyze human DNA collected in the field for investigative and forensics purposes has been a long-time dream for the Federal Bureau of Investigation (FBI), law enforcement and the Department of Defense (DoD).

Will advanced biometrics automate future war machines?

By Ellen Messmer | 29 September, 2011 01:42

TAMPA -- Biometric security breakthroughs are coming that would let the military capture from a distance an iris and facial scan of an individual and immediately match it to a biometrics-based "Watch List" of suspected terrorists, combatants or criminals.

Facial recognition security, privacy issues grab FTC attention

By Michael Cooney | 22 September, 2011 01:41

The Federal Trade Commission the week said it will hold a workshop that examines how burgeoning use of facial recognition technology impacts privacy and security.

Yet another free pass for Aussie spooks

By Stilgherrian | 15 September, 2011 21:47 | 3 Comments

Something doesn't add up. ASIO is doing pretty well. So are our police. Australians sleep safer in their beds than ever before. Yet the government is rushing to pass new laws to "protect" us so fast they're even forgetting the widgets that make them work.

CSO Corporate Partners
  • Webroot
  • Trend Micro
  • NetIQ
rhs_login_lockGet exclusive access to CSO, invitation only events, reports & analysis.
CSO Directory

Identity & Security Management

Identity and Security Management

Security Awareness Tip

Incident handling is a vast topic, but here are a few tips for you to consider in your incident response. I hope you never have to use them, but the odds are at some point you will and I hope being ready saves you pain (or your job!).


  1. Have an incident response plan.

  2. Pre-define your incident response team 

  3. Define your approach: watch and learn or contain and recover.

  4. Pre-distribute call cards.

  5. Forensic and incident response data capture.

  6. Get your users on-side.

  7. Know how to report crimes and engage law enforcement. 

  8. Practice makes perfect.

For the full breakdown on this article

Security ABC Guides

Warning: Tips for secure mobile holiday shopping

I’m dating myself, but I remember when holiday shopping involved pouring through ads in the Sunday paper, placing actual phone calls from tethered land lines to research product stock and availability, and actually driving places to pick things up. Now, holiday shoppers can do all of that from a smartphone or tablet in a few seconds, but there are some security pitfalls to be aware of.