News

Defence gives its security pass card a fail

By Tim Lohman | 13 May, 2011 09:11

Defence is to overhaul the electronic access card system which controls staff access to facilities in the Canberra region amid decreasing overall performance of the security system.

Facebook tightens log-in verification

By Juan Carlos Perez | 13 May, 2011 08:24

To help its hundreds of millions of users prevent unauthorized access to their accounts, Facebook has added an optional verification step to its log-in process.

Unchecked usage can kill cost benefits of cloud services

By Tim Greene | 13 May, 2011 07:47

The touted cost savings associated with cloud services didn't pan out for Ernie Neuman, not because the savings weren't real, but because the use of the service got out of hand.

Facebook backstabs Google and you lose

By Jared Newman | 13 May, 2011 06:54

Thanks to an anti-Google smear campaign ordered by Facebook and carried out by a PR agency, the relationship between Facebook and Google is unquestionably broken beyond repair. And that's bad news for users of both services.

Google Music scams appearing already

By Ed Oswald | 13 May, 2011 06:35

Google Music service has only been in existence for a matter of days, and it's already the target of scams and spams. In all cases however, any claims of free music or access to the site is false, Google says.

Caught! Facebook admits running anti-Google campaign

By Sharon Gaudin | 13 May, 2011 05:14

Facebook has been caught hiring a well-known PR firm to plant anti-Google stories in the media.

Windows 7's malware infection rate climbs, XP's falls

By Gregg Keizer | 13 May, 2011 04:43

Data released today by Microsoft showed that Windows 7's malware infection rate climbed by more than 30 per cent during the second half of 2010, even as the infection rate of the 10-year-old Windows XP fell by more than 20 per cent.

Apple sued again over iOS location and data sharing

By Ian Paul | 13 May, 2011 02:22

Apple is in the hot seat again in a new lawsuit that says iPad and iPhone user location data and other personal information is being shared with third-party advertisers. Apple is accused of aiding and abetting the "intentional taking and transmitting" of user data to third parties. The suit, filed in U.S. District Court in Puerto Rico, also names Pandora Media and The Weather Channel, but leaves the door open to name more defendants at a later date.

Facebook denies privacy breach allegations by Symantec

By Jaikumar Vijayan | 12 May, 2011 07:17

Facebook today denied that it may have accidentally exposed personal user data to advertisers and other third parties for several years, as claimed this week by two security researchers at Symantec Corp.

Interop: Cloud services take a beating in debate over security

By Tim Greene | 12 May, 2011 06:44

Cloud services are not secure enough for businesses to use, or at least that was the conclusion drawn by attendees of an Interop debate, although all of the participants acknowledged the real answer was more subtle.

Businesses need to look at security as a military operation

By Tim Greene | 12 May, 2011 06:44

LAS VEGAS -- Businesses need to look at security as a military exercise and can benefit from strategies that have proved useful in battle, a former military security expert told an Interop audience this week.

Google engineers deny Chrome hack exploited browser's code

By Gregg Keizer | 12 May, 2011 06:34

Several Google security engineers have countered claims that a French security company found a vulnerability in Chrome that could let attackers hijack Windows PCs running the company's browser.

Microsoft leaves Mac Office users in the lurch, says researcher

By Gregg Keizer | 12 May, 2011 03:29

Microsoft yesterday told Mac Office users it doesn't yet have a fix for a PowerPoint bug that it patched for Windows customers.

Smartphones attract organized, international, profit-driven scammers

By Michael Cooney | 12 May, 2011 02:45

The mobile computing technology explosion has brought out seriously organized, international and profit-driven cybercriminals.

Symantec says Facebook applications leaked information

By Robert McMillan | 11 May, 2011 11:13

A programming bug on Facebook's website may have accidentally given advertisers and others access to a treasure trove of personal information, according to security researchers at Symantec.

DoJ wants more wireless location tracking

By Lisa Greim | 11 May, 2011 08:59

In a stunning example of the left hand of government not knowing what the right hand is doing, a representative from the U.S. Department of Justice reminded a Senate subcommittee today that his agency wants to require wireless carriers to keep records of users' location and web sites they access on their smartphones.

Facebook users lax on privacy, protecting children online

By Ed Oswald | 11 May, 2011 06:35

Facebook users still do not use privacy controls to protect themselves, and a third of children under 18 are below the site's minimum age of 13, Consumer Reports reported in its June issue.

Universities that get security right

By Mary K. Pratt | 11 May, 2011 06:15

Professor Corey Schou was working in his school's library when he realized his computer was picking up a particularly strong Wi-Fi signal.

Microsoft unleashes critical update for Windows Server

By Tony Bradley | 11 May, 2011 05:02

Today is Patch Tuesday, and Microsoft is taking it easy on IT admins with a meager two security bulletins this month. But, don't let the small number of updates lull you into a false sense of security. They may be few, but the patches this month are still crucial for network and computer security.

Malware writers gunning for Google Android

By Ellen Messmer | 11 May, 2011 04:43

Symbian and Microsoft Windows Mobile platforms have been the proving ground for mobile malware over the past five years, but a new Juniper Networks report states that Google Android now takes "the crown" as the platform getting the most attention from malware developers.

CSO Corporate Partners
  • Webroot
  • Trend Micro
  • NetIQ
rhs_login_lockGet exclusive access to CSO, invitation only events, reports & analysis.
CSO Directory

Web Malware Protection System (MPS)

Web Malware Protection System (MPS) stops Web-based attacks that traditional and next-generation firewalls, IPS, AV, and Web gateways miss.

Security Awareness Tip

Incident handling is a vast topic, but here are a few tips for you to consider in your incident response. I hope you never have to use them, but the odds are at some point you will and I hope being ready saves you pain (or your job!).


  1. Have an incident response plan.

  2. Pre-define your incident response team 

  3. Define your approach: watch and learn or contain and recover.

  4. Pre-distribute call cards.

  5. Forensic and incident response data capture.

  6. Get your users on-side.

  7. Know how to report crimes and engage law enforcement. 

  8. Practice makes perfect.

For the full breakdown on this article

Security ABC Guides

Warning: Tips for secure mobile holiday shopping

I’m dating myself, but I remember when holiday shopping involved pouring through ads in the Sunday paper, placing actual phone calls from tethered land lines to research product stock and availability, and actually driving places to pick things up. Now, holiday shoppers can do all of that from a smartphone or tablet in a few seconds, but there are some security pitfalls to be aware of.