Security News Curated from across the world
Sophos has seen more than 2,500 variants of the Dorf malware, almost a third of the new threats identified during January 2007. The majority were intercepted by Sophos’ proactive Behavioral Genotype Protection technology even before they were formally identified as belonging to the Dorf family of malware.
http://www.vnunet.com/vnunet/news/2173872/dorf-storms-top-malware-charts
“While identity fraud is still a serious criminal issue in the United States, (the) study points to significant identity fraud reduction as a direct result of changes in industry and consumer behaviors,” James Van Dyke, president and founder of Javelin, said in a statement announcing the results.
In January, retail giant TJX Companies announced that data thieves had stolen an large number of its customers’ credit-card information from a server that processed transactions.
http://www.securityfocus.com/brief/423
Banks that have not yet addressed the need for multifactor authentication will have that at the top of their technology priority lists in 2007. Business process management, event-detection and alert technologies all will play a role in monitoring potential fraudulent activities, notifying legitimate customers of these activities and taking immediate action to prevent fraudsters from succeeding.
Banks will continue to invest meaningful sums in analytic technologies that help drive marketing and sales effectiveness, monitor risks of all types and assess the performance of business activities.
SOA exploration — ranging from “skunkworks” projects to formal architectural plan development — will continue in 2007 at large banks around the globe. Ultimately, SOA will sail (or flounder) based not on banks’ abilities to manage complex technology, but rather, success will be determined on issues of governance and business management.
Rapid technology advances combined with the emergence of post-baby boom populations will change the way corporations, individuals and employees interact with banks. Institutions that are able to accommodate these trends through technology and operations restructuring will have true competitive advantage.
http://www.banktech.com/news/showArticle.jhtml;jsessionid=KCNCQPACSGIXMQSNDLPCKH0CJUNN2JVN?articleID=197000257
The primary design objective behind these particular specifications is high performance universal interoperability.
For the preparation of biometric data suitable for the Federal Bureau of Investigation (FBI) background check, SP 800-76 references FBI documentation, including the ANSI/NIST Fingerprint Standard and the Electronic Fingerprint Transmission Specification.
FIPS 201 [FIPS], Personal Identity Verification (PIV) for Federal Employees and Contractors, defines procedures for the PIV lifecycle activities including identity proofing, registration, PIV Card issuance, and PIV Card usage.
http://www.bankinfosecurity.com/regulations.php?reg_id=385
However, Paul Brettle, technical manager for Stonesoft said that the long lead time for development of security products was no different to what happened with previous versions. He said that Microsoft has been much more efficient in getting the product out to third-party providers to enable them to be Vista aware. “Microsoft has significantly changed several parts of the architecture of Windows for Vista,” said Brettle. “This has forced many providers of security solutions to completely re-engineer their software to support this change.”
http://www.itpro.co.uk/news/102716/malware-more-compatible-with-vista-than-antimalware-products.html
More than 200 mobile phone viruses have been identified since phones have been able to support PC-like applications such as e-mail, instant messaging, and Web browsing, and the number is doubling every six months, TowerGroup said.
http://news.yahoo.com/s/infoworld/20070122/tc_infoworld/85323