Brian Prince

Most would agree cloud computing has become one of the catch phrases of this year’s RSA’s conference in San Francisco. The overall theme: Security may make or break cloud computing efforts as businesses look to balance the needs of regulations, access management and data protection with the business benefits the cloud can bring to the […]

For Trend Micro CTO Raimund Genes, talking about the cloud is nothing new. But now, things are slightly different; instead of talking about Trend Micro offering security services in the cloud, the company is examining the concept of securing the cloud infrastructure that enterprises are expected to adopt, Genes said. “The last few years we […]

Like the sequel to a successful movie, the botnet behind the distributed denial of service attacks that hit the country of Georgia during its conflict with Russia in 2008 has been updated. This time though, the idea isn’t hacktivism-it’s stealing financial data and, unlike in the case of other Russian botnets, the targets are the […]

Microsoft is preparing to release two security updates next week to cover eight security holes in Windows and Microsoft Office. According to Microsoft, both the bulletins will be rated “important,” the second highest rating the company gives to its updates. The first affects Windows XP, Vista and Windows 7 systems. The second bulletin deals with […]

From Koobface to spam to fake Facebook Fan pages, attacks targeting social networks are evolving to bring a new level of insecurity to an enterprise. In his presentation Wednesday at the RSA Conference in San Francisco, Sophos Senior Technology Consultant Graham Cluley detailed some of the common types of attacks and what needs to be […]

Researchers at the University of Michigan say they have uncovered a way to circumvent encryption used on many devices. The research is the work of Valeria Bertacco, Todd Austin and Andrea Pellegrini. According to their paper, entitled ‘Fault-Based Attack of RSA Authentication’ (PDF), the trio demonstrated a way to beat the popular encryption method, which […]

A panel of cyber-security experts at the RSAConference agreed on one thing – the nation’s cyber-security strategy needs beefing up. Finding a way to do that without sacrificing privacy however is more elusive. “You don’t want necessarily to have the government literally sitting there and operating the internet and opening and closing doors because it’s […]

Several major corporations, including tech industry heavyweights Google, VeriSign and CAannounced today at the RSAConference 2010 they will join forces to form the Open Identity Exchange. PayPal, Equifax, Verizon and Booz Allen Hamilton are also part of the group, which will be at the center of efforts to build trust in the secure exchange of […]

Fighting botnets can’t just mean updating antivirus. After all, the amount of malware on the scene is not shrinking. In the past 18 months, security researchers have repeatedly set their eyes on rogue ISPs such as McColo and 3FN/Pricewert. However, the drop off in spam levels after the takedowns was short-lived, as botnet operators shifted […]

The White House has made an unclassified version of a document describing the Obama administration’s Comprehensive National Cybersecurity Initiative (CNCI) available online. The announcement was made March 2 at the RSA Conference in San Francisco by recently appointed White House Cyber-Security Coordinator Howard Schmidt. In addition to describing the CNCI, the document also outlines 12 […]

Researchers at Damballa have uncovered evidence that the botnet behind the now infamous attack on Google in 2009 was active months before the search engine giant was hit. In a 31-page analysis of a botnet described as “amateur,” the researchers traced the botnet’s activity back to July, when its operators first began testing it. By […]

Microsoft has proposed a number of mitigations for a recently disclosed zero-day that could be used to take control of older Windows machines. News of the vulnerability spread last week when Maurycy Prodeus of iSec Security Research posted information about the vulnerability on the Web. According to Microsoft’s advisory, the vulnerability is due to the […]