News

World's first virtual heist? BitCoin user loses $500,000

By Keir Thomas | 16 June, 2011 07:14

Online theft is a fact of life nowadays, but yesterday a BitCoin user woke to find his haul of virtual currency had been plundered.

Congress aims to curb mobile location tracking

By Ed Oswald | 16 June, 2011 07:08

Minnesota Sen. Al Franken is one of most vocal politicians in Washington when it comes to the issue of mobile privacy. In April, he sent letters to both Apple and Google asking if and how they collect location data on their users.

Want to stop cybercrime? Follow the money

By Jon Brodkin | 16 June, 2011 06:49

Five dollars for control over 1,000 compromised email accounts. Eight dollars for a distributed denial-of-service attack that takes down a website for an hour. And just a buck to solve 1,000 captchas.

Bill proposed to regulate collection, use of GPA tracking data

By Jaikumar Vijayan | 16 June, 2011 05:23

Two lawmakers today proposed a bipartisan measure that would regulate how law enforcement agencies and companies can access and use geo-location data gathered from cell phones, tablets and other mobile devices.

LulzSec's Sony hack shows rampant password re-use

By Gregg Keizer | 16 June, 2011 04:31

An analysis of nearly 40,000 passwords stolen from Sony Pictures by the hyperactive LulzSec crew shows that people persist in re-using passwords, a dangerous practice in light of frequent Web site break-ins, a researcher said today.

Enterprises get new guidance on PCI compliance in virtual environments

By Jaikumar Vijayan | 15 June, 2011 20:11

Enterprises got some much needed clarification on the implementation of PCI requirements in virtualized environments on Tuesday.

WA Auditor General finds significant security vulnerabilities in government agencies

By Tim Lohman | 15 June, 2011 14:39

The Western Australia Auditor General, Colin Murphy, has identified significant vulnerabilities to cyber threats in all of the agencies examined for his 2011 Information Systems Audit Report.

Cyberwarfare unfreezing a new Cold War warns McAfee CSO

By Hamish Barwick | 15 June, 2011 10:42

The Cold War between the USA and Russia may have ended two decades ago but a new frosty conflict between America and China together with North Korea has emerged on the digital frontier, according to McAfee’s US chief security officer.

LulzSec attacks gaming sites ... just for laughs

By Robert McMillan | 15 June, 2011 09:42

The hacking group known as LulzSec called it Titanic Takeover Tuesday. Gamers called it by a variety of names, many of which cannot be reprinted here. But for system administrators at a handful of gaming companies, Tuesday, June 14 was a nightmare: the day their websites went down under an online attack.

5 possible reasons U.S. users are ditching Facebook

By Brennon Slattery | 15 June, 2011 08:25

Have we finally grown tired of Facebook? According to Inside Facebook, more than five per cent of U.S. users abandoned Facebook in May -- that's about six million people who have stopped "liking" the world's largest social network. Six million people jumping ship sounds like a lot, but when you consider that Facebook is on track to hit 700 million users any day now, it's not such a big deal.

Microsoft patches critical IE9, Windows bugs

By Gregg Keizer | 15 June, 2011 06:45

Microsoft today patched 34 vulnerabilities in Windows, Internet Explorer (IE), Office and other software, 15 of them labeled "critical" by the company.

Cellcrypt releases voice encryption app for Android

By Jeremy Kirk | 15 June, 2011 02:37

The company Cellcrypt released an application on Tuesday for mobile phones running Android that encrypts voice calls, addressing increasing concern that voice traffic over cellular networks could be intercepted with off-the-shelf equipment.

CSO Anonymous

By CSO staff | 14 June, 2011 21:24

Why is it such a struggle to work in security? Show me a security professional who hasn’t felt misunderstood and undervalued. Who hasn’t complained that they are treated like a pariah? What are we missing? Is it our fault or is the world not ready for us yet? Does a major security breach have to happen before the penny drops?

Mobile Malware and Cyber Warfare

By CSO staff | 14 June, 2011 20:38

Security analysts have been predicting the emergence of mobile malware for many years. In 2011, the criminals have finally come through by attacking Google's popular Android OS. Meanwhile, the sophistication of Stuxnet — anasty piece of code that infected a nuclear power facility — has alarmed researchers who believegovernments are stockpiling tools for cyberwar. Looking ahead, it seems a cataclysmic Cloud failure is just around the corner.

Careers spotlight: Hires and fires

By Computerworld Staff | 14 June, 2011 14:55 | 1 Comment

Astaro nabs SonicWALL staff while TechnologyOne hires higher education expert

Questions the CEO should be asking IT staff about the RSA hack

By Hamish Barwick | 14 June, 2011 12:05

Companies who have unanswered questions and concerns about the RSA token hack should be talking to the IT department as soon as possible, according to a rival security vendor.

Lulzsec sets sights on U.S. Senate and game-maker Bethesda

By Robert McMillan | 14 June, 2011 10:57

The Lulzsec hacking group continues to cause headaches for IT staffers. On Monday it published data it obtained from servers belonging to the U.S. Senate and Bethesda Softworks, a Rockville, Maryland, game maker.

Privacy groups push for U.S. Facebook probe

By Sharon Gaudin | 14 June, 2011 08:02

The privacy flap over Facebook's new facial recognition service has gained some momentum.

Russian bank puts lie detector in ATM machine

By John E Dunn | 14 June, 2011 03:41

Customers of the Russian Sperbank might in future have to pay attention to how nervous they sound if they wish to withdraw money from the bank's ATM machines.

Porn site users beware: Hackers may have your email

By Keir Thomas | 14 June, 2011 01:30

The mischievous computer hacking team known as LulzSec has turned its attention from consumer electronics maker Sony to the pornography industry -- at least for now.

CSO Corporate Partners
  • Webroot
  • Trend Micro
  • NetIQ
rhs_login_lockGet exclusive access to CSO, invitation only events, reports & analysis.
CSO Directory

Cloud Trust Authority

Reduce complexity and increase trust for public cloud service providers and their customers.

Security Awareness Tip

Incident handling is a vast topic, but here are a few tips for you to consider in your incident response. I hope you never have to use them, but the odds are at some point you will and I hope being ready saves you pain (or your job!).


  1. Have an incident response plan.

  2. Pre-define your incident response team 

  3. Define your approach: watch and learn or contain and recover.

  4. Pre-distribute call cards.

  5. Forensic and incident response data capture.

  6. Get your users on-side.

  7. Know how to report crimes and engage law enforcement. 

  8. Practice makes perfect.

For the full breakdown on this article

Security ABC Guides

Warning: Tips for secure mobile holiday shopping

I’m dating myself, but I remember when holiday shopping involved pouring through ads in the Sunday paper, placing actual phone calls from tethered land lines to research product stock and availability, and actually driving places to pick things up. Now, holiday shoppers can do all of that from a smartphone or tablet in a few seconds, but there are some security pitfalls to be aware of.