Skip to content

CyberSecurity Institute

Security News Curated from across the world

Menu
Menu

Author: admini

Groups warn travelers to limit laptop data

Posted on May 3, 2008December 30, 2021 by admini

The letter came ten days after a federal appeals court in the Central District of California ruled that border agents could search laptops without reasonable suspicion of illegal activity. “In a free country, the government cannot have unlimited power to read, seize, store and use all information on any electronic device carried by any traveler entering or leaving the nation,” the signatories stated in the letter.

The level of surveillance by the United States government has become an increasing worry to civil-rights advocates as well as professional, minority and religious groups that believe their members could be targeted.

As part of its “War on Terror,” the Bush Administration has instituted a program to eavesdrop on Internet and phone communications, an initiative that violates the Foreign Intelligence Surveillance Act (FISA) and has become the focus of a battle in Congress to craft a new law to govern such wiretapping.

The Electronic Frontier Foundation, a digital-rights group and one of the sponsors of the letter, has requested information on the conditions that would trigger a digital search by border agents. “We don’t really know what the Department of Homeland Security’s procedures and practices are here,” said Marcia Hofman, a staff attorney with the EFF.

The case at the heart of the debate concerns whether evidence from the July 2005 search of a laptop owned by then-43-year-old Michael Arnold can be used by prosecutors. Returning from a three-week trip from the Philippines, Arnold was stopped by customs agents in Los Angeles International Airport and asked to show that his laptop was functioning, according to court filings. Perusing through the files in those folders, the agents found pictures of two nude women and decided to conduct a more thorough investigation, which turned up suspected child pornography.

The Association of Corporate Travel Executives, one of the letter’s signers, recommended that workers not use their personal laptops for international travel and limit the amount of proprietary and personal data stored on any notebook computer taken across borders. “In a time of heightened international security, it will take a brave Congress to rule that parties may not be subject to suspicionless searches,” Susan Gurley, the executive director of ACTE, said in a statement.

Following the ruling, there is nothing preventing authorities from a more comprehensive search program, said Fred Schneider, a privacy and security expert and professor of computer science at Cornell University. “It won’t be long before customs agents can efficiently perform a thorough search on every machine,” Jennifer Granick, civil liberties director at the EFF, said in a discussion of the impact of the ruling.

Encrypting the hard drive, having a separate account on the PC owned by the worker’s company, or traveling with a clean laptop and using an encrypted VPN to access data are all possibilities, Granick said.

http://www.securityfocus.com/news/11516?ref=rss

Read more

Experts warn over SQL injection attacks

Posted on April 29, 2008December 30, 2021 by admini

Visitors to a compromised Web site could find their browser executing a Javascript file — simply named 1.js or 1.htm — embedded in the iframe, leading to another site that would attempt to install keylogging software by exploiting several different vulnerabilities.

“The exploits target Microsoft applications, specifically browsers not patched against the VML exploit MS07-004 as well as other applications,” security firm Websense stated in a research note last week. “At the moment it appears that a small set of people are behind these attacks,” the group said.

http://www.securityfocus.com/brief/729?ref=rss

Read more

US court says IP addresses are private

Posted on April 25, 2008December 30, 2021 by admini

The Supreme Court of the state of New Jersey said that information about a person’s use of the internet was so private that police there cannot order ISPs to release surfing details of suspects with a municipal court subpoena. They must receive a grand jury subpoena, it said.

“The court holds that citizens have a reasonable expectation of privacy in the subscriber information they provide to internet service providers,” said the court’s ruling. “Law enforcement officials can obtain subscriber information by serving a grand jury subpoena on an Internet service provider without notice to the subscriber.”

Many are unaware that a numerical IP address can be captured by the websites they visit. After Reid’s ISP, Comcast, handed over details of her account, including the IP address from which she accessed the internet, she was found guilty of computer theft in connection with the hacking incident. Reid overturned that decision on appeal and at the Supreme Court of New Jersey stage, arguing that the evidence should be suppressed.

The court said that although Reid was successful in having the municipal warrant-obtained evidence suppressed, the police were not barred from approaching Comcast again and obtaining the records using an appropriate warrant.

http://www.theregister.co.uk/2008/04/24/us_rules_ip_addresses_private/

Read more

Two additional supplements for PCU

Posted on April 24, 2008December 30, 2021 by admini

Requirement 11.3 addresses penetration testing, which includes network and application layer testing, as well as controls and processes around the networks and applications. Proper use of automated source code analyzer (scanning) tools.

The second option for Requirement 6.6 is a Web Application Firewall (WAF) which is a security policy enforcement point positioned between a web application and a client end point.

The Information Supplement provides recommended capabilities of a select WAF, additional recommended capabilities for certain environments, additional considerations for organizations implementing a WAF and additional sources of information on Web application security.

http://www.net-security.org/secworld.php?id=6053

Read more

New IBM security services for mid-sized businesses

Posted on April 24, 2008December 30, 2021 by admini

Express Multi-Function Security Bundle — new services that help provide the most complete do-it-yourself protection against network threats, vulnerabilities, worms, viruses, spy-ware and spam in a single Unified Threat Management (UTM) solution.

IBM Express PCI Assessments – assessment for companies that accept, store or process credit card information for compliance with the Payment Card Industry (PCI) Data Security Standard. IBM developed these services in response to recent IBM X-Force research that showed an alarming rise in organized crime attacks on smaller organizations. According to IBM’s team of X-Force global security experts, because mid-sized companies typically lack the vast information technology (IT) resources needed to prepare for such attacks, they can often be prime targets for network attacks, data breaches and other malicious threats.

Express Multi-Function Security Bundle — new services that help provide the most complete do-it-yourself protection against network threats, vulnerabilities, worms, viruses, spy-ware and spam in a single Unified Threat Management (UTM) solution.

IBM Express PCI Assessments – assessment for companies that accept, store or process credit card information for compliance with the Payment Card Industry (PCI) Data Security Standard.

http://www.net-security.org/secworld.php?id=6057

Read more

Market’s Message to Security Pros: Adapt or Die

Posted on April 24, 2008December 30, 2021 by admini

“The security professional’s job is becoming less technical and more managerial… It means understanding the business needs and being able to speak to business people in terms they can understand.”

This year’s ISC(2)/Frost & Sullivan survey showed a marked increase in the number of security professionals who consider “communication skills” to be a critical part of their jobs. At the same time, however, fear of security breaches and the associated fallout has brought a new level of urgency — and tension — to the security pro’s day.

In a study published earlier this week by Amplitude Research and VanDyke Software, 50 percent of network administrators surveyed said that “securing remote access” was their chief concern, reflecting a growing concern about increasingly mobile employees.

“Growing awareness of the damage caused by security breaches, together with the increasing demand for a more mobile and remote workforce, will keep the worldwide market for security software buoyant,” said Gartner, which published its annual security software forecast earlier this week. Gartner predicts that the security market will continue to grow despite a poor economy, thanks in part to growing fear about breaches and the threat they pose to business.

Schmidt, who has been a top security officer at eBay, Microsoft, and the White House, said he was surprised at the concern displayed over potential damage to the corporate reputation, given that most of the companies which have publicly disclosed their breaches have suffered only temporary embarrassment. In fact, the question now is not how precarious the security manager’s job is, but what it may evolve into, Schmidt observed. “As it becomes more about risk, security is not necessarily an IT problem.”

http://www.darkreading.com/document.asp?doc_id=151738&f_src=darkreading_section_296

Read more

Posts navigation

  • Previous
  • 1
  • …
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • …
  • 421
  • Next

Recent Posts

  • AI/ML News – 2024-04-14
  • Incident Response and Security Operations -2024-04-14
  • CSO News – 2024-04-15
  • IT Security News – 2023-09-25
  • IT Security News – 2023-09-20

Archives

  • April 2024
  • September 2023
  • August 2023
  • July 2023
  • June 2023
  • April 2023
  • March 2023
  • February 2022
  • January 2022
  • December 2021
  • September 2020
  • October 2019
  • August 2019
  • July 2019
  • December 2018
  • April 2018
  • December 2016
  • September 2016
  • August 2016
  • July 2016
  • April 2015
  • March 2015
  • August 2014
  • March 2014
  • August 2013
  • July 2013
  • June 2013
  • May 2013
  • April 2013
  • March 2013
  • February 2013
  • January 2013
  • October 2012
  • September 2012
  • August 2012
  • February 2012
  • October 2011
  • August 2011
  • June 2011
  • May 2011
  • April 2011
  • February 2011
  • January 2011
  • December 2010
  • November 2010
  • October 2010
  • August 2010
  • July 2010
  • June 2010
  • May 2010
  • April 2010
  • March 2010
  • February 2010
  • January 2010
  • December 2009
  • November 2009
  • October 2009
  • September 2009
  • June 2009
  • May 2009
  • March 2009
  • February 2009
  • January 2009
  • December 2008
  • November 2008
  • October 2008
  • September 2008
  • August 2008
  • July 2008
  • June 2008
  • May 2008
  • April 2008
  • March 2008
  • February 2008
  • January 2008
  • December 2007
  • November 2007
  • October 2007
  • September 2007
  • August 2007
  • July 2007
  • June 2007
  • May 2007
  • April 2007
  • March 2007
  • February 2007
  • January 2007
  • December 2006
  • November 2006
  • October 2006
  • September 2006
  • August 2006
  • July 2006
  • June 2006
  • May 2006
  • April 2006
  • March 2006
  • February 2006
  • January 2006
  • December 2005
  • November 2005
  • October 2005
  • September 2005
  • August 2005
  • July 2005
  • June 2005
  • May 2005
  • April 2005
  • March 2005
  • February 2005
  • January 2005
  • December 2004
  • November 2004
  • October 2004
  • September 2004
  • August 2004
  • July 2004
  • June 2004
  • May 2004
  • April 2004
  • March 2004
  • February 2004
  • January 2004
  • December 2003
  • November 2003
  • October 2003
  • September 2003

Categories

  • AI-ML
  • Augment / Virtual Reality
  • Blogging
  • Cloud
  • DR/Crisis Response/Crisis Management
  • Editorial
  • Financial
  • Make You Smile
  • Malware
  • Mobility
  • Motor Industry
  • News
  • OTT Video
  • Pending Review
  • Personal
  • Product
  • Regulations
  • Secure
  • Security Industry News
  • Security Operations
  • Statistics
  • Threat Intel
  • Trends
  • Uncategorized
  • Warnings
  • WebSite News
  • Zero Trust

Meta

  • Log in
  • Entries feed
  • Comments feed
  • WordPress.org
© 2025 CyberSecurity Institute | Powered by Superbs Personal Blog theme