Skip to content

CyberSecurity Institute

Security News Curated from across the world

Menu
Menu

Author: admini

Enterprise study reveals Wi-Fi Deployment Trends and Plans

Posted on August 2, 2006December 30, 2021 by admini

This year’s report was sponsored by Aruba Wireless Networks. Wi-Fi, it turns out, is high on the “clout” list in enterprises. It tied with VPNs as the network technology (both wired and wireless) of top importance to enterprises over the next 18 months, both garnering a 5.6 aggregate score of importance out of a possible 7.

Wi-Fi has been now deployed in user offices and cubicles in 62% of the respondents’ companies.

And, not surprisingly, but valuable to verify, the primary architecture wars have pretty well been resolved: Nearly half the respondents said they are using or are likely to use thin access points (AP) with a controller for centralized management and security, compared to just 33% saying so last year.

Correspondingly, plans to use intelligent stand-alone APs with no centralized controller dropped by six percentage points over last year, and plans to use stand-alone APs with some centralized management decreased by about 7%.

http://www.networkworld.com/newsletters/wireless/2006/0731wireless1.html

Read more

SCADA flaw checks coming to Nessus

Posted on August 1, 2006December 30, 2021 by admini

Digital Bond, a security consultancy that focuses on supervisory control and data acquisition (SCADA) and other distributed control system technology, plans to release the initial set of plug-in features on November 1.

“Many of the existing Nessus plugins pull security related information about IT devices on the network,” Digital Bond’s CEO Dale Peterson stated on the company’s blog.

As part of the push, Idaho National Laboratory has teamed up with infrastructure providers to offer example contract language intended to require that suppliers make security a priority.

http://www.securityfocus.com/brief/269

Read more

Federal Financial Regulators Release Updated Information Security Booklet

Posted on July 30, 2006December 30, 2021 by admini

In addition to the revised Information Security Booklet, the agencies also released an Executive Summary that contains high level synopses of each of the twelve booklets and describes the handbook development and maintenance processes.

FIEC – http://www.bankinfosecurity.com/html/ffiec-updated-information-security-booklet.html
The Offıce of Thrift Supervision (OTS) – http://www.bankinfosecurity.com/html/it_exam_handbook_updated.html
FDIC – http://www.bankinfosecurity.com/html/fdic-insurance-assessment-penalties.html

Read more

Banks face Web security deadline

Posted on July 28, 2006December 30, 2021 by admini

Earlier this month, the company’s Zions Bank unit added a multifactor authentication feature called SecurEntry for users of its online banking services. Woods said SecurEntry is based on technology from RSA Security Inc. and allows Zions to better authenticate users to its Web site and ensure that they know they’re connected to a legitimate site. The technology works by profiling the devices that customers typically use to log into the bank’s online systems.

Desert Schools Federal Credit Union in Phoenix is using a similar authentication approach based on technology from Santa Clara, Calif.-based Bharosa Inc. to meet the FFIEC’s guidelines. “It kind of moved things up for us,” CIO Ron Amstutz said, adding that he thought the FFIEC was quite clear on what it wanted banks to do.

The FFIEC is an interagency body set up to develop standards for the auditing of financial institutions. Although the council isn’t mandating compliance with the authentication guidelines, it has said that banks will be audited against them starting next year.

http://cwflyris.computerworld.com/t/722392/6725445/27842/0/

Read more

Laptop border searches OK’d

Posted on July 26, 2006December 30, 2021 by admini

In January 2004, Stuart Romm traveled to Las Vegas to attend a training seminar for his new employer. Then, on Feb. 1, Romm continued the business trip by boarding a flight to Kelowna, British Columbia. Romm was denied entry by the Canadian authorities because of his criminal history. When he returned to the Seattle-Tacoma airport, he was interviewed by two agents of Homeland Security’s Immigration and Customs Enforcement division. They asked to search his laptop, and Romm agreed. Agent Camille Sugrue would later testify that she used the “EnCase” software to do a forensic analysis of Romm’s hard drive. That analysis and a subsequent one found some 42 child pornography images, which had been present in the cache used by Romm’s Web browser and then deleted. But because in most operating systems, only the directory entry is removed when a file is “deleted,” the forensic analysis was able to recover the actual files.

During the trial, Romm’s attorney asked that the evidence from the border search be suppressed. Romm was eventually sentenced to two concurrent terms of 10 and 15 years for knowingly receiving and knowingly possessing child pornography. The 9th Circuit refused to overturn his conviction, ruling that American citizens effectively enjoy no right to privacy when stopped at the border.

“We hold first that the ICE’s forensic analysis of Romm’s laptop was permissible without probable cause or a warrant under the border search doctrine,” wrote Judge Carlos Bea. Joining him in the decision were Judges David Thompson and Betty Fletcher.

“To be sure, the court today invokes precedent stating that neither probable cause nor a warrant ever have been required for border searches,” Brennan wrote. “If this is the law as a general matter, I believe it is time that we re-examine its foundations.” But Brennan and Marshall were outvoted by their fellow justices, who ruled that the drug war trumped privacy, citing a “veritable national crisis in law enforcement caused by smuggling of illicit narcotics.”

Today their decision means that laptop-toting travelers should expect no privacy either. As an aside, a report last year from a U.S.-based marijuana activist says U.S. border guards looked through her digital camera snapshots and likely browsed through her laptop’s contents. A London-based correspondent for The Economist magazine once reported similar firsthand experiences, and a 1998 article in The New York Times described how British customs scan laptops for sexual material.

Here are some tips on using encryption to protect your privacy. “First, we address whether the forensic analysis of Romm’s laptop falls under the border search exception to the warrant requirement…Under the border search exception, the government may conduct routine searches of persons entering the United States without probable cause, reasonable suspicion, or a warrant. For Fourth Amendment purposes, an international airport terminal is the “functional equivalent” of a border. Thus, passengers deplaning from an international flight are subject to routine border searches.

Romm argues he was not subject to a warrantless border search because he never legally crossed the U.S.-Canada border.

We have held the government must be reasonably certain that the object of a border search has crossed the border to conduct a valid border search….In all these cases, however, the issue was whether the person searched had physically crossed the border. There is no authority for the proposition that a person who fails to obtain legal entry at his destination may freely re-enter the United States; to the contrary, he or she may be searched just like any other person crossing the border. Nor will we carve out an “official restraint” exception to the border search doctrine, as Romm advocates. We assume for the sake of argument that a person who, like Romm, is detained abroad has no opportunity to obtain foreign contraband. Even so, the border search doctrine is not limited to those cases where the searching officers have reason to suspect the entrant may be carrying foreign contraband. Instead, ‘searches made at the border…are reasonable simply by virtue of the fact that they occur at the border.’

http://news.zdnet.com/2100-9595_22-6098939.html

Read more

The Value of Branding Your Security Awareness Program

Posted on July 22, 2006December 30, 2021 by admini

While we have installed firewalls, intrusion detection systems, robust anti-virus and anti-spyware solutions, and strengthened authentication methods, we have still largely ignored security awareness training. And when the authors say ignored, she means that most companies now have an Acceptable Use Policy in place that employees have to sign upon employment, but that’s where the effort stops. Security awareness programs are about changing culture.

http://www.bankinfosecurity.com/articles.php?art_id=157&PHPSESSID=ccd23e68b1848b308c34fd9680492a63

Read more

Posts pagination

  • Previous
  • 1
  • …
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • …
  • 421
  • Next

Recent Posts

  • Boards Are Pricing Cyber Risk In. The IT Function Isn’t Keeping Up.
  • AI News – Mon, 17 Nov 2025
  • CSO News – Mon, 17 Nov 2025
  • AI/ML News – 2024-04-14
  • Incident Response and Security Operations -2024-04-14

Archives

  • April 2026
  • November 2025
  • April 2024
  • September 2023
  • August 2023
  • July 2023
  • June 2023
  • April 2023
  • March 2023
  • February 2022
  • January 2022
  • December 2021
  • September 2020
  • October 2019
  • August 2019
  • July 2019
  • December 2018
  • April 2018
  • December 2016
  • September 2016
  • August 2016
  • July 2016
  • April 2015
  • March 2015
  • August 2014
  • March 2014
  • August 2013
  • July 2013
  • June 2013
  • May 2013
  • April 2013
  • March 2013
  • February 2013
  • January 2013
  • October 2012
  • September 2012
  • August 2012
  • February 2012
  • October 2011
  • August 2011
  • June 2011
  • May 2011
  • April 2011
  • February 2011
  • January 2011
  • December 2010
  • November 2010
  • October 2010
  • August 2010
  • July 2010
  • June 2010
  • May 2010
  • April 2010
  • March 2010
  • February 2010
  • January 2010
  • December 2009
  • November 2009
  • October 2009
  • September 2009
  • June 2009
  • May 2009
  • March 2009
  • February 2009
  • January 2009
  • December 2008
  • November 2008
  • October 2008
  • September 2008
  • August 2008
  • July 2008
  • June 2008
  • May 2008
  • April 2008
  • March 2008
  • February 2008
  • January 2008
  • December 2007
  • November 2007
  • October 2007
  • September 2007
  • August 2007
  • July 2007
  • June 2007
  • May 2007
  • April 2007
  • March 2007
  • February 2007
  • January 2007
  • December 2006
  • November 2006
  • October 2006
  • September 2006
  • August 2006
  • July 2006
  • June 2006
  • May 2006
  • April 2006
  • March 2006
  • February 2006
  • January 2006
  • December 2005
  • November 2005
  • October 2005
  • September 2005
  • August 2005
  • July 2005
  • June 2005
  • May 2005
  • April 2005
  • March 2005
  • February 2005
  • January 2005
  • December 2004
  • November 2004
  • October 2004
  • September 2004
  • August 2004
  • July 2004
  • June 2004
  • May 2004
  • April 2004
  • March 2004
  • February 2004
  • January 2004
  • December 2003
  • November 2003
  • October 2003
  • September 2003

Categories

  • AI-ML
  • Augment / Virtual Reality
  • Blogging
  • Cloud
  • DR/Crisis Response/Crisis Management
  • Editorial
  • Financial
  • Make You Smile
  • Malware
  • Mobility
  • Motor Industry
  • News
  • OTT Video
  • Pending Review
  • Personal
  • Product
  • Regulations
  • Secure
  • Security Industry News
  • Security Operations
  • Statistics
  • Threat Intel
  • Trends
  • Uncategorized
  • Warnings
  • WebSite News
  • Zero Trust

Meta

  • Log in
  • Entries feed
  • Comments feed
  • WordPress.org
© 2026 CyberSecurity Institute | Powered by Superbs Personal Blog theme