Fahmida Y. Rashid

World IPv6 Day Should Be a Fairly Quiet Day for Most Users

June 8 will be the first-ever World IPv6 Day, when participating Internet service providers, content management networks and Web companies will switch to IPv6 networks for 24 hours in the world’s first stress test of the next-generation networking protocol. More than 200 companies, including Google, Yahoo and Facebook, are participating, according to the Internet Society. […]

Proactive, Aggressive Network Penetration Testing Lacking in Organizations

Despite the rising tide of cyber-attacks and malware, organizations are not proactively testing their infrastructure to find and address vulnerabilities, according to a security expert. The National Institute of Standards and Technology recommendations require government agencies to deploy some kind of continuous network monitoring practices to defend their environments against security threats. The recommended strategies […]

Yahoo, Hotmail Hit by Phishing Attacks Similar to Gmail Incursions

Days after Google disclosed several high-profile Gmail accounts had been hit by a phishing campaign, reports have emerged of similar attacks against other Web-based email providers. Hotmail and Yahoo Mail have also been targeted with similar phishing attacks, Nart Villeneuve, a senior threat researcher at Trend Micro, wrote in a June 2 blog post. Villeneuve […]

Northrop Grumman, L-3 Communications Hacked via Cloned RSA SecurID Tokens

Another defense contractor appears to have been hit by a cyber-attack, and a leaked memo indicates company executives believe attackers used information stolen from RSA Security earlier this year. If true, RSA’s SecurID technology may be irrevocably compromised. Attackers hit major defense contractor L-3 Communications Holdings by spoofing pass codes from a cloned RSA SecurID […]

Traditional Defensive Security Can’t Stop New APTs, Zero-Day Threats

So long as organizations continue to invest in security products that are defensive, cyber-attackers will continue to successfully breach networks and steal information, warned a security expert. Organizations have invested in traditional defenses that are “fundamentally reactive” as they rely on known methods of attack, Ashar Aziz, CEO, CTO and founder of FireEye, told eWEEK. […]

Cyber-Attacks Highlight Need to Focus on Stronger Database Security

When cyber-attackers breach an organization’s network, the database is usually their target. However, many organizations are so focused on protecting the perimeter that they don’t think about protecting the database itself, according to several security experts. Many organizations still think that protecting the perimeter is sufficient to protect the data, but as recent data breaches […]

Most Websites Regularly Leak Sensitive, Personal Data: Survey

A team of university researchers examined more than 100 “popular” Websites and found three-quarters of the sites leaked private information or users’ identifying data to third-party tracking sites. The survey results were released shortly after Facebook came under fire for inadvertently passing user data to other parties. More than half (56 percent) of sites “directly […]

Apple’s MacDefender Removal Tool Bypassed By New Variant

It’s a game of whack-a-mole. Apple pushed out a security update that could detect and remove known MacDefender variants from Mac OS X (Snow Leopard) on May 31. A new version of the fake antivirus that could get past Apple’s File Quarantine was spotted in the wild less than eight hours later. The latest version […]

Oracle Donates OpenOffice.org Open-Source Project to Apache

The open-source office-productivity suite OpenOffice has a surprising new home: Apache. There was some speculation Oracle might donate the project to the The Document Foundation, the group of developers that split from OpenOffice to launch LibreOffice last fall. OpenOffice will join Apache Software Foundation as an “incubator” project, Oracle said June 1. As an incubator […]

Intel, VMware, EMC Supply Infrastructure for NYSE Capital Markets Cloud

NEW YORK-The technology services arm of the New York Stock Exchange Euronext has launched a cloud computing platform that will allow trading firms and banks to outsource their operations. This is the first public “financial services-specific” cloud platform, NYSE Technologies said. The cloud, officially known as the Capital Markets Community Platform, will host customer applications […]