Skip to content

CyberSecurity Institute

Security News Curated from across the world

Menu
Menu

Author: admini

FDIC Proposes New Risk-Based Insurance Assessment System

Posted on July 11, 2006December 30, 2021 by admini

“We hope that most FDIC-insured institutions will find our proposals reasonable and fair, and we look forward to receiving comments.”

Comments on the proposed rules are due within 60 days of publication in the Federal Register, which is expected to occur within a week.

In a related action, the FDIC Board also issued for comment a proposed new official sign for institutions to display at teller stations and elsewhere.

http://www.bankinfosecurity.com/regulations.php?reg_id=274&PHPSESSID=cfb4ec9e2060b1a75aa318ad04007258

Read more

What CIOs can learn from Mediaeval Castles

Posted on July 11, 2006December 30, 2021 by admini

Secure outer “areas” provided a forum for trade and agriculture to be developed and helped the castle community to develop and prosper, in much the same way that controlled third party access, virtual private networks and secure remote access help to increase overall efficiency and productivity for businesses today. Castles were constructed to anticipate the likeliest path of attack and to force attackers into positions of weakness. They were designed so that attacks would be as difficult as possible, forcing enemies to charge uphill, expose their own weakensses to attack and leave themselves unguarded.

Harlech’s unsurpassed natural setting — with the mighty protection of the sea, the mountains, steep impenetrable cliff faces and the natural strength of the rock — certainly played a major role in helping King Edward build a castle to meet the defensive requirements of the age. Applications are built as rapidly as possible and put onto the network landscape, often no consideration is given to their security at it is assumed that they will be secured with the overall perimeter fencing. An integrated, multi-layered approach is necessary to guard against today’s sophisticated IT security threats and protect business critical systems across an organisation. Protecting The Crown Jewels Harlech castle’s architectural design and impressive security defences played an equally important role as its natural defences in protecting the inhabitants and their assets from hostile attack.

The moat and draw bridge formed the first line of defence, and for those who penetrated these initial lines, there lay the and outer wall and an impressive twin-towered gatehouse with three portcullises (more on this later). Here, key locations were protected by high inner walls, round towers and battlements, designed to offer the utmost protection and security to the King and valuable assets.

We must look at Infosecurity issues in much the same way, ensuring that business critical systems remain secure and protected against attack.

Encouraging Trade and Commerce Maximum security is all well and good, but the castle architect also had to design a fortress which would control access to third parties such as merchants and tradespeople whose presence would benefit the castle community and help it to prosper. In today’s increasingly mobile and flexible workplace, it is important that security architecture be developed with improved openess and accessibility to network applications and services for maximum productivity, while also maintaining the security of core business systems.

http://www.it-observer.com/articles/1180/what_cios_can_learn_mediaeval_castles/

Read more

VPNs: $23B And Growing

Posted on July 10, 2006December 30, 2021 by admini

SSL-VPNs offer the promise of simple remote access connectivity since from an end user standpoint they typically involve just a Web browser to access a corporate network. They differ from their principal technology competitor IPSec VPNs in that IPSec typically requires an additional client application.

Nearly half the revenue comes from large organizations, with medium-sized outfits accounting for a third and small companies only by 21 percent.

http://www.internetnews.com/stats/article.php/3618756

Read more

Criminals Increasingly Blend IT Threats

Posted on July 7, 2006December 30, 2021 by admini

As businesses and home users have become increasingly savvy about traditional threats delivered via e-mail attachments, criminals are finding new ways to lure end users to consume their attacks, according to the report.

Researchers specifically cited a growth in the number of threats that use spam e-mail messages or IMs to distribute links to Web sites where malware or spyware is secretly downloaded to end users’ computers.

Criminals are also using data garnered from PCs already infected with their botnet virus code to refine their other spam and spyware efforts, said Paul Wood, senior analyst with New York-based MessageLabs. The attack uses a phishing e-mail in an attempt to persuade PayPal customers to call a phony customer service call center where they are asked to disclose personal information including their credit card details by an automated voice system. Using other common forms of converged attacks, criminals are creating Web sites that distribute small “dropper” malware files that secretly infiltrate PCs and later deliver larger Trojan viruses.

Botnet operators are also becoming more sophisticated, using spyware loaded onto the machines they control to garner personal information that can be used to help target other attacks, MessageLabs said.

http://www.eweek.com/article2/0,1759,1985999,00.asp?kc=EWRSS03119TX1K0000594

Read more

Visa, MasterCard to unveil new security rules

Posted on July 7, 2006December 30, 2021 by admini

The updated PCI standard will cover Web apps, third-party controls. VISA Inc. and MasterCard International Inc. will release new security rules in the next 30 to 60 days for all organizations that handle credit card data, a Visa official said this week. The rules will be the first major updates to the one-year-old Payment Card Industry (PCI) data security standard, which analysts said is slowly but surely being adopted. One set of PCI extensions is aimed at protecting credit card data from emerging Web application security threats, said Eduardo Perez, vice president of corporate risk and compliance at Foster City, Calif.-based Visa. Other new rules will require companies to ensure that any third parties that they deal with, such as hosting providers, have proper controls for securing credit card data.

Read more

Security agency war game tries to teach Net defense

Posted on July 7, 2006December 30, 2021 by admini

In hopes of simulating a real-world situation, the attackers made a point of using the most publicly known exploits during the competition. They also took advantage of common mistakes like the use of weak passwords or the same passwords on multiple systems, and targeted security holes in Microsoft Windows that have readily available patches. In one case, for instance, NSA hackers gained control of a router in a complex network architecture built by the West Point team because the team neglected to change the default password on the Cisco Systems device.

Michael Tanner, an Air Force cadet, said the team’s nine members, mostly computer science and engineering majors, had only basic knowledge of information assurance practices.

“We know there’s a tendency for students to think they have to build some sort of whizbang network with bells and whistles,” said Rigo MacTaggart, who participated on the NSA’s end.

http://news.com.com/Security+agency+war+game+tries+to+teach+Net+defense/2100-7355_3-6091731.html?tag=nefd.top

Read more

Posts navigation

  • Previous
  • 1
  • …
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • …
  • 421
  • Next

Recent Posts

  • AI/ML News – 2024-04-14
  • Incident Response and Security Operations -2024-04-14
  • CSO News – 2024-04-15
  • IT Security News – 2023-09-25
  • IT Security News – 2023-09-20

Archives

  • April 2024
  • September 2023
  • August 2023
  • July 2023
  • June 2023
  • April 2023
  • March 2023
  • February 2022
  • January 2022
  • December 2021
  • September 2020
  • October 2019
  • August 2019
  • July 2019
  • December 2018
  • April 2018
  • December 2016
  • September 2016
  • August 2016
  • July 2016
  • April 2015
  • March 2015
  • August 2014
  • March 2014
  • August 2013
  • July 2013
  • June 2013
  • May 2013
  • April 2013
  • March 2013
  • February 2013
  • January 2013
  • October 2012
  • September 2012
  • August 2012
  • February 2012
  • October 2011
  • August 2011
  • June 2011
  • May 2011
  • April 2011
  • February 2011
  • January 2011
  • December 2010
  • November 2010
  • October 2010
  • August 2010
  • July 2010
  • June 2010
  • May 2010
  • April 2010
  • March 2010
  • February 2010
  • January 2010
  • December 2009
  • November 2009
  • October 2009
  • September 2009
  • June 2009
  • May 2009
  • March 2009
  • February 2009
  • January 2009
  • December 2008
  • November 2008
  • October 2008
  • September 2008
  • August 2008
  • July 2008
  • June 2008
  • May 2008
  • April 2008
  • March 2008
  • February 2008
  • January 2008
  • December 2007
  • November 2007
  • October 2007
  • September 2007
  • August 2007
  • July 2007
  • June 2007
  • May 2007
  • April 2007
  • March 2007
  • February 2007
  • January 2007
  • December 2006
  • November 2006
  • October 2006
  • September 2006
  • August 2006
  • July 2006
  • June 2006
  • May 2006
  • April 2006
  • March 2006
  • February 2006
  • January 2006
  • December 2005
  • November 2005
  • October 2005
  • September 2005
  • August 2005
  • July 2005
  • June 2005
  • May 2005
  • April 2005
  • March 2005
  • February 2005
  • January 2005
  • December 2004
  • November 2004
  • October 2004
  • September 2004
  • August 2004
  • July 2004
  • June 2004
  • May 2004
  • April 2004
  • March 2004
  • February 2004
  • January 2004
  • December 2003
  • November 2003
  • October 2003
  • September 2003

Categories

  • AI-ML
  • Augment / Virtual Reality
  • Blogging
  • Cloud
  • DR/Crisis Response/Crisis Management
  • Editorial
  • Financial
  • Make You Smile
  • Malware
  • Mobility
  • Motor Industry
  • News
  • OTT Video
  • Pending Review
  • Personal
  • Product
  • Regulations
  • Secure
  • Security Industry News
  • Security Operations
  • Statistics
  • Threat Intel
  • Trends
  • Uncategorized
  • Warnings
  • WebSite News
  • Zero Trust

Meta

  • Log in
  • Entries feed
  • Comments feed
  • WordPress.org
© 2025 CyberSecurity Institute | Powered by Superbs Personal Blog theme