Fahmida Y. Rashid

Cyber-Espionage, Duqu Trojan Lead Week’s Security News

Duqu continued to dominate security headlines as researchers analyzed the malware to discover its origins and intended target. The Indian government, acting on information provided by Symantec researchers, raided a Web hosting company in Mumbai andseized hard drives and other components from a server suspected of being a remote command and control server for the […]

U.S. Counts on the Cloud to Boost Cyber-Security

Army Gen. Keith Alexander, head of the National Security Agency (NSA), discussed the cloud and how to defend against increasingly sophisticated cyber-threats at a recent Information Systems Security Association conference in Baltimore and in a follow-up interview with eWEEK. As commander of U.S. Cyber Command, he also discussed rules of engagement for the military in […]

Employee Online Holiday Shopping Poses Security Risk to Enterprises

As the holiday shopping season approaches, IT managers are concerned about employees shopping online using their personal devices while at work, according to a new survey. More than half the time spent shopping will be done using either work computers or personal devices on corporate networks, which would pose significant risks to the network and […]

U.S., EU Conduct Joint Cyber-Security Exercise to Defend Against Attacks

The United States and European Union took part in the first-ever joint cyber-security exercise addressing how to cooperate and respond in the event of a cyber-attack on critical infrastructure. The European Network and Information Security Agency (ENISA) and the U.S. Department of Homeland Security conducted the daylong table-top exercise, Cyber Atlantic 2011, on Nov. 3. […]

U.S. Congressional Report Accuses China, Russia of Cyber-Espionage

A U.S. government report has directly accused China and Russia of conducting cyber-espionage campaigns against American companies. Cyber-espionage attempts by China and Russia are a “pervasive threat” to the United States and surpasses traditional forms of spying, the Office of the National Counterintelligence Executive wrote in a report to Congress released Nov. 3. “Foreign Spies […]

IBM Adds Data Analytics, Intelligence Tools to Security Services Portfolio

IBM unveiled enhancements to its security services portfolio, promising customers improved data analytics and deeper real-time analysis of security threats. Customers can analyze data from multiple sources across the enterprise and determine how to tweak their security strategies and make sure security and business needs are aligned using new intelligence tools and services, IBM said […]

Microsoft Issues Temporary Duqu Workaround, Plans 4 Patch Tuesday Fixes

Microsoft is expected to release four bulletins closing holes in all supported versions of the Windows operating system in next week’s Patch Tuesday update.As expected, Microsoft did not release any information in this Patch Tuesday advisory about a possible fix for the zero-day vulnerability in the Windows kernel that is being exploited by the Duqu […]

Consumers Concerned About Data Security, Hold Organizations Accountable

Consumers are increasingly willing to take action against organizations if their personal information is ever compromised by a security breach, Unisys found. More than 10,000 people in 12 countries, including 1,000 from the United States, were surveyed by Lieberman Researcher Group and Newspoll in the latest Unisys Security Index, released Nov. 2. While there were […]

British Police Jail 13 in $4.6 Million Cyber-Fraud Scheme

British police have jailed 13 people suspected of being part of a sophisticated banking fraud cyber-gang that used malware to steal millions of dollars from hundreds of people. The cyber-crime ring is accused of using Trojans to infect PCs and stealing sensitive information, including bank account numbers and log-in credentials, the Metropolitan Police Central eCrime […]

Secunia Offers Noncash Rewards for Software Vulnerabilities

Secunia launched a program to help coordinate reporting and resolving vulnerability disclosures by security researchers. Researchers can submit software vulnerabilities discovered in off-the-shelf products to the Secunia Vulnerability Coordination Reward Program, Secunia said Nov. 2. Flaws in online services and Web applications do not qualify, according to the company. Under the program, Secunia will validate […]