Fahmida Y. Rashid

Duqu continued to dominate security headlines as researchers analyzed the malware to discover its origins and intended target. The Indian government, acting on information provided by Symantec researchers, raided a Web hosting company in Mumbai andseized hard drives and other components from a server suspected of being a remote command and control server for the […]

Army Gen. Keith Alexander, head of the National Security Agency (NSA), discussed the cloud and how to defend against increasingly sophisticated cyber-threats at a recent Information Systems Security Association conference in Baltimore and in a follow-up interview with eWEEK. As commander of U.S. Cyber Command, he also discussed rules of engagement for the military in […]

As the holiday shopping season approaches, IT managers are concerned about employees shopping online using their personal devices while at work, according to a new survey. More than half the time spent shopping will be done using either work computers or personal devices on corporate networks, which would pose significant risks to the network and […]

The United States and European Union took part in the first-ever joint cyber-security exercise addressing how to cooperate and respond in the event of a cyber-attack on critical infrastructure. The European Network and Information Security Agency (ENISA) and the U.S. Department of Homeland Security conducted the daylong table-top exercise, Cyber Atlantic 2011, on Nov. 3. […]

A U.S. government report has directly accused China and Russia of conducting cyber-espionage campaigns against American companies. Cyber-espionage attempts by China and Russia are a “pervasive threat” to the United States and surpasses traditional forms of spying, the Office of the National Counterintelligence Executive wrote in a report to Congress released Nov. 3. “Foreign Spies […]

IBM unveiled enhancements to its security services portfolio, promising customers improved data analytics and deeper real-time analysis of security threats. Customers can analyze data from multiple sources across the enterprise and determine how to tweak their security strategies and make sure security and business needs are aligned using new intelligence tools and services, IBM said […]

Microsoft is expected to release four bulletins closing holes in all supported versions of the Windows operating system in next week’s Patch Tuesday update.As expected, Microsoft did not release any information in this Patch Tuesday advisory about a possible fix for the zero-day vulnerability in the Windows kernel that is being exploited by the Duqu […]

Consumers are increasingly willing to take action against organizations if their personal information is ever compromised by a security breach, Unisys found. More than 10,000 people in 12 countries, including 1,000 from the United States, were surveyed by Lieberman Researcher Group and Newspoll in the latest Unisys Security Index, released Nov. 2. While there were […]

British police have jailed 13 people suspected of being part of a sophisticated banking fraud cyber-gang that used malware to steal millions of dollars from hundreds of people. The cyber-crime ring is accused of using Trojans to infect PCs and stealing sensitive information, including bank account numbers and log-in credentials, the Metropolitan Police Central eCrime […]

Secunia launched a program to help coordinate reporting and resolving vulnerability disclosures by security researchers. Researchers can submit software vulnerabilities discovered in off-the-shelf products to the Secunia Vulnerability Coordination Reward Program, Secunia said Nov. 2. Flaws in online services and Web applications do not qualify, according to the company. Under the program, Secunia will validate […]

The Duqu Trojan discovered two weeks ago exploits at least one zero-day vulnerability in Microsoft Windows, according to security researchers. The vulnerability was triggered by a booby-trapped Word document, according to a post from researchers from Hungary’s Laboratory of Cryptography and System Security on Nov. 1. Microsoft is working to address the issue and will […]

Some of the biggest companies-including Apple, IBM and AT&T-were easily tricked into giving up potentially sensitive information during a contest that featured a variety of social engineering attacks. The “Social Engineering Capture the Flag” contest targeted 14 companies in five industries-retail, airlines, food service, technology and mobile services-during the DefCon conference in Las Vegas in […]