News about None
  • The bottom line on phishing

    By Ellen Messmer | 29 April, 2013 19:20

    Phishing attacks on enterprises can be calamitous in terms of compromised networks or damaged brand names, and the Anti-Phishing Working Group (APWG), which aggregates and analyzes phishing trends data worldwide, offers some of the best insight from industry into what's occurring globally in terms of this cybercrime. The following list of frequently asked questions about phishing is derived from the APWG's April report that covers the period July-December 2012 worldwide.

  • 12 Must-Do PC Tasks

    By Alex Castle | 05 April, 2013 15:59

    Computers may have become a lot more user-friendly over the past decade, but they're still far from perfect--PCs require a certain amount of configuration and maintenance to operate at their full potential. Unfortunately, because we humans are also far from perfect, we frequently don't put in the work we should, and we end up with a slower, sloppier, less secure machine as a result.

  • Retailer faces uphill battle in US$13M lawsuit against Visa, analyst says

    By Jaikumar Vijayan | 15 March, 2013 16:09

    Specialty retailer Genesco faces an uphill battle in its precedent-setting US$13.3 million lawsuit against Visa USA, a Garner analyst said.

  • IT security managers too focused on compliance, experts say

    By Jaikumar Vijayan | 01 March, 2013 17:15

    Companies with IT security strategies that focus mostly on complying with key standards are dangerously unprepared for emerging cyber threats, said security experts at the RSA Conference 2013 here this week.

  • Ruby on Rails patches more critical vulnerabilities

    By Jeremy Kirk | 09 January, 2013 07:24

    Those using the Ruby on Rails web application framework on their websites are being advised to update the software immediately after multiple new vulnerabilities were found. It's the second time this month that Rails has been patched because of serious flaws.

Features about None
CSO Corporate Partners
  • Webroot
  • Trend Micro
  • NetIQ
rhs_login_lockGet exclusive access to CSO, invitation only events, reports & analysis.
CSO Directory

NetIQ Security Manager

NetIQ® Security Manager™ is an industry-leading Security Information and Event Management (SIEM) solution that provides protection for your critical data and systems.

Security Awareness Tip

Incident handling is a vast topic, but here are a few tips for you to consider in your incident response. I hope you never have to use them, but the odds are at some point you will and I hope being ready saves you pain (or your job!).


  1. Have an incident response plan.

  2. Pre-define your incident response team 

  3. Define your approach: watch and learn or contain and recover.

  4. Pre-distribute call cards.

  5. Forensic and incident response data capture.

  6. Get your users on-side.

  7. Know how to report crimes and engage law enforcement. 

  8. Practice makes perfect.

For the full breakdown on this article

Security ABC Guides

Warning: Tips for secure mobile holiday shopping

I’m dating myself, but I remember when holiday shopping involved pouring through ads in the Sunday paper, placing actual phone calls from tethered land lines to research product stock and availability, and actually driving places to pick things up. Now, holiday shoppers can do all of that from a smartphone or tablet in a few seconds, but there are some security pitfalls to be aware of.