News
World's first virtual heist? BitCoin user loses $500,000
Online theft is a fact of life nowadays, but yesterday a BitCoin user woke to find his haul of virtual currency had been plundered.
Congress aims to curb mobile location tracking
Minnesota Sen. Al Franken is one of most vocal politicians in Washington when it comes to the issue of mobile privacy. In April, he sent letters to both Apple and Google asking if and how they collect location data on their users.
Want to stop cybercrime? Follow the money
Five dollars for control over 1,000 compromised email accounts. Eight dollars for a distributed denial-of-service attack that takes down a website for an hour. And just a buck to solve 1,000 captchas.
Bill proposed to regulate collection, use of GPA tracking data
Two lawmakers today proposed a bipartisan measure that would regulate how law enforcement agencies and companies can access and use geo-location data gathered from cell phones, tablets and other mobile devices.
LulzSec's Sony hack shows rampant password re-use
An analysis of nearly 40,000 passwords stolen from Sony Pictures by the hyperactive LulzSec crew shows that people persist in re-using passwords, a dangerous practice in light of frequent Web site break-ins, a researcher said today.
Enterprises get new guidance on PCI compliance in virtual environments
Enterprises got some much needed clarification on the implementation of PCI requirements in virtualized environments on Tuesday.
WA Auditor General finds significant security vulnerabilities in government agencies
The Western Australia Auditor General, Colin Murphy, has identified significant vulnerabilities to cyber threats in all of the agencies examined for his 2011 Information Systems Audit Report.
Cyberwarfare unfreezing a new Cold War warns McAfee CSO
The Cold War between the USA and Russia may have ended two decades ago but a new frosty conflict between America and China together with North Korea has emerged on the digital frontier, according to McAfee’s US chief security officer.
LulzSec attacks gaming sites ... just for laughs
The hacking group known as LulzSec called it Titanic Takeover Tuesday. Gamers called it by a variety of names, many of which cannot be reprinted here. But for system administrators at a handful of gaming companies, Tuesday, June 14 was a nightmare: the day their websites went down under an online attack.
5 possible reasons U.S. users are ditching Facebook
Have we finally grown tired of Facebook? According to Inside Facebook, more than five per cent of U.S. users abandoned Facebook in May -- that's about six million people who have stopped "liking" the world's largest social network. Six million people jumping ship sounds like a lot, but when you consider that Facebook is on track to hit 700 million users any day now, it's not such a big deal.
Microsoft patches critical IE9, Windows bugs
Microsoft today patched 34 vulnerabilities in Windows, Internet Explorer (IE), Office and other software, 15 of them labeled "critical" by the company.
Cellcrypt releases voice encryption app for Android
The company Cellcrypt released an application on Tuesday for mobile phones running Android that encrypts voice calls, addressing increasing concern that voice traffic over cellular networks could be intercepted with off-the-shelf equipment.
CSO Anonymous
Why is it such a struggle to work in security? Show me a security professional who hasn’t felt misunderstood and undervalued. Who hasn’t complained that they are treated like a pariah? What are we missing? Is it our fault or is the world not ready for us yet? Does a major security breach have to happen before the penny drops?
Mobile Malware and Cyber Warfare
Security analysts have been predicting the emergence of mobile malware for many years. In 2011, the criminals have finally come through by attacking Google's popular Android OS. Meanwhile, the sophistication of Stuxnet — anasty piece of code that infected a nuclear power facility — has alarmed researchers who believegovernments are stockpiling tools for cyberwar. Looking ahead, it seems a cataclysmic Cloud failure is just around the corner.
Careers spotlight: Hires and fires
Astaro nabs SonicWALL staff while TechnologyOne hires higher education expert
Questions the CEO should be asking IT staff about the RSA hack
Companies who have unanswered questions and concerns about the RSA token hack should be talking to the IT department as soon as possible, according to a rival security vendor.
Lulzsec sets sights on U.S. Senate and game-maker Bethesda
The Lulzsec hacking group continues to cause headaches for IT staffers. On Monday it published data it obtained from servers belonging to the U.S. Senate and Bethesda Softworks, a Rockville, Maryland, game maker.
Privacy groups push for U.S. Facebook probe
The privacy flap over Facebook's new facial recognition service has gained some momentum.
Russian bank puts lie detector in ATM machine
Customers of the Russian Sperbank might in future have to pay attention to how nervous they sound if they wish to withdraw money from the bank's ATM machines.
Porn site users beware: Hackers may have your email
The mischievous computer hacking team known as LulzSec has turned its attention from consumer electronics maker Sony to the pornography industry -- at least for now.
- 1
Bank trojan targets users of Bitcoin exchange Mt Gox
- 2
Australian Information Security Association issues blunt warning as National Cyber Security Awareness Week begins
- 3
Review: Mobile Device Management
- 4
The week in security: Aussie banks targeted as mobiles drive privacy fears
- 5
Security a key factor in LogMeIn’s Internet of Things platform
-
Clamp the cable clutter with 4Cabling
-
AVG Technologies Launches its Latest Range of Performance Applications for Android™
-
Lan 1 meets demand for cloud security with Authentication-as-a-Service
-
Splunk Named a Leader in Gartner Magic Quadrant for SIEM
-
Dell Sets Sights on Cisco, Announces Game-Changing NSA Series That Introduces Powerful Next-Gen Firewall Advances for Mid-sized Businesses and Distributed Enterprises
- FTTest Analyst (MS Environment) .netNSW
- FTSenior Python DeveloperNSW
- FTSenior Python Web Applications DeveloperNSW
- FTR&D EngineerSA
- FTLead Software EngineerSA
- FTTest EngineerVIC
- FTQuality ManagerSA
- FTJob Title: Mac Systems/ Enterprise Systems EngineerNZ
- FTWeb Developer- Drupal and PHP. Exciting new position- #2 in Dev team.$100k+SuperNSW
- FTTest Analyst (MS Environment) .netNSW
- FT.NET - Sitecore Developer - Melbourne - PermNSW
- FTSenior Python DeveloperNSW
- FTOS Web Applications DeveloperNSW
Incident handling is a vast topic, but here are a few tips for you to consider in your incident response. I hope you never have to use them, but the odds are at some point you will and I hope being ready saves you pain (or your job!).
- Have an incident response plan.
- Pre-define your incident response team
- Define your approach: watch and learn or contain and recover.
- Pre-distribute call cards.
- Forensic and incident response data capture.
- Get your users on-side.
- Know how to report crimes and engage law enforcement.
- Practice makes perfect.
Warning: Tips for secure mobile holiday shopping
I’m dating myself, but I remember when holiday shopping involved pouring through ads in the Sunday paper, placing actual phone calls from tethered land lines to research product stock and availability, and actually driving places to pick things up. Now, holiday shoppers can do all of that from a smartphone or tablet in a few seconds, but there are some security pitfalls to be aware of.









