News

AusCERT 2013: Home-electronics gear’s UPnP as insecure in Australia as rest of world: Metasploit

By David Braue | 22 May, 2013 21:10

Australia’s Internet space shows the same distribution of vulnerable IP ports as the rest of the world and a dangerous preponderance of insecure Universal Plug ‘n’ Play (UPnP) devices, Metasploit Project founder HD Moore has warned while recounting the surprising results of his efforts to catalogue the results of communicating with every IP address on the Internet.

AusCERT 2013: Big data skills help beat the bad guys, says HP

By Richard Chirgwin | 22 May, 2013 20:44

HP's Colin Henderson believes the security industry needs to become more adept at understanding the role of big data in security analysis, to try and stay ahead of an increasingly sophisticated and collaborative “black hat” world.

Growing mobile malware threat swirls (mostly) around Android

By Stephen Lawson | 22 May, 2013 16:01

Mobile devices are getting hit by a boom in malware similar to the one that hit PCs starting with the rise of the Web, a security software executive said Tuesday.

In pictures: AusCERT 2013 Day One

By Computerworld Staff | 22 May, 2013 15:10

The annual AusCERT conference began on the Gold Coast with an invasion by some friendly storm troopers. Delegates heard insights from Google, the Department of Environment and Queensland Police Service. The conference continues until Friday.

Blue Coat Systems to acquire security analytics firm Solera Networks

By Lucian Constantin | 22 May, 2013 14:35

Blue Coat Systems, a provider of Web traffic filtering and business assurance products and services, plans to buy security analytics specialist Solera Networks, which uses data mining techniques to classify network traffic and detect potential security threats.

Dell targets ANZ security opportunities as SecureWorks debuts locally

By David Braue | 22 May, 2013 14:00

An IT security skills crunch may be hitting many established security providers and security-conscious companies, but new entrant Dell SecureWorks is confident it can thrive as it today throws its white hat into the ANZ security-services ring.

UAE cloud security market poised for growth, says Frost & Sullivan

By Tom Paye | 22 May, 2013 13:32

According to the latest report from Frost & Sullivan, the United Arab Emirates (UAE) is showing a greater demand for cloud security solutions, as cloud uptake across the region continues to increase.

Target located: The growth of the targeted attack

By Joe Lipscombe | 22 May, 2013 13:28

In 1971, John Draper used a whistle, found in a cereal box, to reproduce a 2,600 Hz tone able to allow phreaks to make free calls -- wire fraud was born. This was a man acting on no other motive than personal gain, but how the game has changed. Just last year, oil giant Saudi Aramco suffered a very serious and very public cyber attack, which floored 30,000 machines. This was a very sophisticated and organised act of cybercrime.

New Citadel malware variant targets Payza online payment platform

By Lucian Constantin | 22 May, 2013 12:12

A new variant of the Citadel financial malware is targeting users of the Payza online payment platform by launching local in-browser attacks to steal their credentials, according to researchers from security firm Trusteer.

AusCERT 2013: NBN users need security professionals’ help, says Google

By Hamish Barwick | 22 May, 2013 10:46

Google has urged security professionals to help Australians stay safe on the National Broadband Network (NBN).

U.S. power companies under frequent cyberattack

By Jeremy Kirk | 22 May, 2013 01:33

A survey of U.S. utilities shows many are facing frequent cyberattacks that could threaten a highly interdependent power grid supplying more than 300 million people, according to a congressional report.

Aurora hackers said to have accessed law enforcement targets

By John P. Mello | 21 May, 2013 23:46

Chinese cyber marauders sought more than just information on activists -- they wanted access to FBI, DOJ investigations on spies in the U.S.

Microsoft may be scanning your Skype messages

By John P. Mello Jr. | 21 May, 2013 20:40

If you have any expectations about the privacy of your Skype communications, you may want to reassess them.

Researchers find critical vulnerabilities in popular game engines

By Lucian Constantin | 21 May, 2013 18:42

Security researchers found serious vulnerabilities in the engines of several popular first-person shooter video games that could allow attackers to compromise their online servers and the computers of players accessing them.

Pentagon clearance for iOS could open even more doors for Apple in the private sector

By Tony Bradley | 21 May, 2013 16:24

The Pentagon's decision to grant Apple the security clearance required for iOS 6 devices to go head-to-head with BlackBerry 10 and certain Samsung Galaxy S4 devices on secure military networks could have with a cascading effect that spills over into the private sector.

Digital strongboxes won't solve whistleblower problem for journalists

By John P. Mello | 21 May, 2013 13:02

Strongbox preserves anonymity at the price of authenticty

ACMA database keeps finger on Australia’s malware pulse

By David Braue | 21 May, 2013 12:21

Australian ISPs and universities are sending more than 10,000 emails a day to warn customers their systems appear to be infected by malware – but as few as one in five is ever read by its recipient, statistics from the Australian Communications and Media Authority’s (ACMA’s) Australian Internet Security Initiative (AISI) show.

Bit9, FireEye, Palo Alto Networks team to hit zero-day malware

By Ellen Messmer | 21 May, 2013 06:10

Bit9 has teamed with FireEye and Palo Alto Networks, which each have sandboxing technologies, in order to share information related to zero-day attack code.

Opinion varies on action against Chinese cyberattacks

By Antone Gonsalves | 20 May, 2013 21:08

New cyberespionage attack by People's Liberation Army prompts calls for action such as sanctions, but experts are mixed on best response

Chinese hackers resume attacks on U.S. targets

By John P. Mello Jr. | 20 May, 2013 20:00

For the last three months or so, the U.S. government and some of its defense contractors have engaged in a war of shame on China to pressure it to cool its cyber-attacks on U.S. targets. The campaign appeared to be yielding results, but it seems that Chinese hackers were only catching their breath.

CSO Corporate Partners
  • Webroot
  • Trend Micro
  • NetIQ
rhs_login_lockGet exclusive access to CSO, invitation only events, reports & analysis.
CSO Directory

ZENworks® Endpoint Security Management

Get powerful mobile security capabilities, and protect the data the various mobile devices inside your organization.

Security Awareness Tip

Incident handling is a vast topic, but here are a few tips for you to consider in your incident response. I hope you never have to use them, but the odds are at some point you will and I hope being ready saves you pain (or your job!).


  1. Have an incident response plan.

  2. Pre-define your incident response team 

  3. Define your approach: watch and learn or contain and recover.

  4. Pre-distribute call cards.

  5. Forensic and incident response data capture.

  6. Get your users on-side.

  7. Know how to report crimes and engage law enforcement. 

  8. Practice makes perfect.

For the full breakdown on this article

Security ABC Guides

Warning: Tips for secure mobile holiday shopping

I’m dating myself, but I remember when holiday shopping involved pouring through ads in the Sunday paper, placing actual phone calls from tethered land lines to research product stock and availability, and actually driving places to pick things up. Now, holiday shoppers can do all of that from a smartphone or tablet in a few seconds, but there are some security pitfalls to be aware of.