Fahmida Y. Rashid

Being regulatory-compliant does not necessarily reduce the chances of a data breach, at least for the health care industry, according to a new study. Even more worrisome, organizations appear to be focusing more on compliance and less on security. About 56 percent of IT security professionals in the health care industry said they spend the […]

In what is becoming a regular occurrence, Sony has shut down another service after another attack. This time, the vulnerability was in the Canadian e-commerce site for Sony Ericsson. More than 2,000 customers have had their personal data stolen from the e-commerce store, including e-mail addresses, passwords, and telephone numbers, Sony told the BBC on […]

Microsoft patched a cross-site scripting flaw on its Hotmail service that was being exploited by cyber-criminals to read and steal e-mail messages. The flaw allowed the cyber-criminals to target victims with specially crafted phishing e-mails after reading their e-mails, according to Trend Micro researchers. The researchers reported the cross-site scripting issue to Microsoft on May […]

Sony’s PlayStation Network, Qriocity, Sony Online Entertainment Date Reported: April 26Size: 101 million user accountsType of Data: name, home and e-mail addresses, login credentials, some credit card information Sonys three cloud services for PlayStation games, music and video, and online gaming were compromised by attackers while the company was distracted by a distributed denial of […]

Apple has finally broken its silence on the MacDefender scareware and other fake AV variants that have been making the rounds recently. The company promised a Mac OS X update to remove the malware. Apple will deliver a Mac OS X software update “in the coming days” that will automatically find and remove MacDefender malware […]

Two weeks after Microsoft said it would acquire Skype, the voice over IP company has begun cutting its ties with the open-source world. Asterisk was the first partner cut loose. Skype decided not to renew its agreement with Digium, which allowed Asterisk, the open-source telephony system, to be integrated with the Skype service, Digium said […]

Browser security is back in the spotlight as another Comodo partner suffered a security breach that allowed attackers to access customer data. Brazil-based ComodoBR is at least the fourth Comodo partner to be compromised this year. In this incident, attackers used SQL injection to access certificate-signing requests and expose customer information from the ComodoBR database. […]

Microsoft investigators have uncovered more than 400,000 email addresses from a single hard drive seized during the Rustock botnet takedown in March, according to court documents. The Rustock gang also had stolen credit card numbers. Microsoft outlined its investigation into the hard drives belonging to the botnet’s command and control servers in a status report […]

Sony is not having a good spring at all. Just days after the PlayStation Network came back online after an attack compromised 77 million user accounts, two Sony properties were hit by SQL injection attacks. The same group that targeted Fox.com earlier this month used a SQL injection attack to expose data on Sony Music […]

Mobile devices are increasingly becoming a key security risk for enterprises as employees access sensitive company information using smartphones, tablets, laptops and netbooks. However, most employees are not thinking enough about protecting corporate data when using these devices, a recent survey shows. One in three employees polled kept sensitive work-related information on their mobile devices, […]

Cisco announced new products and services to help enterprises migrate their existing IPv4 infrastructure to the next-generation IPv6 standard. Cisco added IPv6-specific features to its routers and switches to make it easier to deploy and manage dual-stack environments, the company said May 24. The new capabilities address the challenges organizations face to “unify” IPv4 and […]

Sony ended its fiscal year with one disaster – the devastating earthquake and tsunami that hit northeast Japan in March – and began the new one with another – a massive data breach in April. They both will have a significant impact on the company’s bottom line, according to Sony. Sony estimated May 23 that […]