Search

Cloud-based password managers strike some as a potential risk, but how bad is the danger? [ABSTRACT FROM AUTHOR]

Cloud-based password managers strike some as a potential risk, but how bad is the danger? [ABSTRACT FROM AUTHOR]

The article discusses the breach of customer login information collected by the app CloudPets of the software company Spiral Toys and emphasizes on the probe launched by the U.S. senator Bill Nelson through a letter to chief executive officer (CEO) of Spiral Toys Mark Meyers.

The article discusses destructive attacks on openly-accessible Hadoop and CouchDB databases by ransomware groups, which are of similar pattern as attacks on MongoDB open-source database program and search engine Elasticsearch clusters. Topics include efforts of security researchers Victor Gevers and Niall Merrigan to keep track of Hadoop and CouchDB victims by documenting attack signatures and messages left behind; and efforts of Kraken0, a ransomware attack group, to sell its attack toolkit.

The article discusses impact of publicly disclosed vulnerability in the MySQL database that allow cyber attackers to operate servers. Topics discussed include security updates released by computer technology firm Oracle; prevention of widespread abuse of database servers; and authenticated connection of attacker to the MySQL service.

The article discusses how to set up a data center with protected backup and restoration. There are numerous technologies and thousands of products available for backing up data. The place to begin is with an assessment of which data and systems need to be protected and what the cost would be if they were to go down. Computer user must look at two metrics, the recovery time objective (RTO) and recovery point objective (RPO). RTO will determine how long a particular machine or service can be down and RPO will describe how current the restored data must be and how often a backup must be done.

The article predicts emerging computer security threats for 2013. Topics include hacking of Internet browser software through malicious e-mail and text messages, large-scale breaches of database systems, and attempts to bypass identity protection password authentication measures. Also discussed is the potential for malware espionage or cyberterrorism against critical national infrastructure facilities through their supervisory control and data acquisition (SCADA) and incident command system (ICS) networks.

The article reports on of cross-checking hacked database by Russia and China for identification of U.S. intelligence operatives. Topics discussed include compromise of U.S. engineers and scientists who provided technical assistance to undercover agencies, cross referencing of compromised databases, announcement by U.S Office of Personal Management (OPM) regarding breach of security clearance and views of Ken Westin, security analyst for cyber security Tripwire, on the breach of OPM.

The article presents the revelations of Hold Security, a company that specializes in analyzing data breaches regarding a data theft by a Russian speaking group which are results of database flaws that allow hackers to access other information stored in the systems including sensitive company information, emails and internal documents. Alex Holden, Hold Security's founder compares the theft with the hacking which the dating site Ashley Madison Inc. fell prey to.

The article focuses on the vulnerability in the Xen virtualization software's emulation code. Topics discussed include open source hardware emulator Quick Emulator's (QEMU) CD-ROM drive emulation software which is the location of the vulnerability, patches released by Xen Project on June 27, 2015 which reveals database vulnerabilities and exposures, and QEMU process and code on host operating system (OS).

The article focuses on a proposed settlement by the U.S. federal court includes measures to better protect the customer data that American retailer Target Corp. collects. Under the settlement. company has to pay individual victims up to 10,000 dollar and also provide its employees with security training around keeping consumer data safe.

The article reports on the move of the U.S. National Security Agency and its intelligence partners in inspecting stolen data in search for relevant information. It offers information on the INTOLERANT traffic, a cache of stolen data that is known internally to the intelligence agencies of the U.S., New Zealand and Canada. Documents leaked by American computer professional Edward Snowden on the hijacking of cyberespionage efforts of intelligence agencies are also emphasized.

The article reports that computer technology company Oracle will fix 167 security vulnerabilities for its products including its E-Business Suite product in January 2015. David Litchfield, database security expert, states that the vulnerabilities for the E-Business Suite can cause severe threat because it can give hackers an opportunity to access the databases that contains sensitive business records by using the Structured Query Language (SQL), computer program language.

The article reports that the non users of Flash Player with the fixes released on October 14, 2014, may face vulnerability, which is being tracked as CVE-2014-0569 in the Common Vulnerabilities and Exposures (CVE) database. It mentions that these attacks was first marked by an independent malware researcher known online as Kafeine.

The article reports on the repair of encryption failures for Enigmail email security extension for Thunderbird. An overview about the Enigmail which provides a graphical user interface in the Mozilla Thunderbird and SeaMonkey programs is provided. The developers have fixed several issues that could have exposed messages users believed to be encrypted.

The article reports that the Mozilla Foundation announced a new data security breach in August 2014, in which e-mail addresses and encrypted passwords of thousands of users who tested early builds of the Bugzilla bug tracking software, were left on a publicly accessible server for 30 days. It says that it was the second database exposure incident involving Mozilla projects.

The article reports on the issues arise following the discovery of stolen online credential database by Russian hackers. Noted is the stance of some security researchers on the clarity of the incidence and in faulting Hold Security LLC, the company that uncovered the stolen credentials, for not providing more details of it. The researchers also raise questions on the age of the credentials, their origin and the security of passwords.

The article presents the unanswered questions on the amassing of database credentials by hackers in Russia in 2014. Among the questions related to the incident include issues on the origin of the credentials, their targeted websites, purpose, possible victims and their challenge to password security. It is pointed out that security companies are developing authentication methods to address the issue.

The article reports on the vulnerabilities found out by Austin, Texas-based Exodus Intelligence, a specializing in selling information on software vulnerabilities, which pointed to an operating system and suite of applications that are designed to impossibly track a user's online activity.

The article reports on the intrusion to the web-based graphics system at the Wall Street Journal's network by a hacker through an SQL injection vulnerability.

The article reports that a federal bill, which proposes kill-switch technology be made mandatory in smartphones as a means to reduce theft of the devices has been introduced. The kill switch would allow consumers to remotely wipe and disable a stolen smartphone. It is considered by proponents to be a key tool in combating the increasing number of smartphone robberies.

The article reports on a new tool introduced by solutions vendor Onapsis that will be used to secure the High-Performance Analytic Appliance (HANA) in-memory database of software company SAP AG. It states that the company plans to integrate the tool into its X1 suite, which has the ability to scan vulnerabilities and configuration problems. It adds that the HANA database serves as SAP's foundation to compete with computer technology firm Oracle and International Business Machines Corp. (IBM).

The article reports that the Internet company Google Inc. has become the latest victim of the domain name system (DNS) attack in Malaysia. It focuses on the weakness in the entities that administers the important website address database records. It mentions that the hackers succeeded in attaining the login credentials of the people authorized to change or modify important records, which is dangerous as it can result in the attack of a person's computer.

The article reports that in the wake of attacks on government systems and other systems deemed to be of national importance, the Australian Signals Directorate (ASD) is seeking to augment its information security capabilities. It is mentioned that four executive-level positions are to be filled by the ASD in its cyber security branch inclduing a malware analyst and a vulnerability researcher.

The article reports on the launch of Amazon Macie, a service on machine learning that help customers prevent exposure of sensitive data and unauthorized access to data in Amazon S3 by the Amazon Web Services Inc. (AWS). It cites on the company's improvements to other services including the launch of migration hub, encryption of data at rest in AWS system and a complete rewrite of Cloud hardware security module to meet security and compliance requirements for sensitive data.

The article reports on the efforts being made by Apple Inc. to overhaul and restore its developer systems after an intrusion took place in the systems. According to the company, due to the intrusion personal information about registered users may have been compromised. However, according to the company, there has been no compromise of credit card information or iTunes accounts.

Advises on how to protect computers from threats of intrusion from coworkers or family members. Mention of CMOS passwords for security purposes; Importance of keeping the computer's case closed by using a locking mechanism; Tip on how to update an older computer without spending too much money. INSET: SLOW THE PRINTER FLOW.

Discusses privacy concerns in relation to computers and the Internet. Personal information in computer databases; Recommendation of Simson Garfinkel's 'Database Nation: The Death of Privacy in the 21st Century'; How highly sensitive medical information is traveling between health care and insurance industries often without legal restraint; Possibility of compromising a database; Argument that we need laws concerning privacy and security.

The article discusses global venture capital investor Macquarie Capital is inviting applicants for position of chief information security officer (CISO) who can spot next big cyber security start-up. It mentions firm is seeking an executive to fill an Entrepreneurial Cyber Security Visionary Role who will advise Macquarie's venture capital team on cyber security investment opportunities. It also mentions the firms is seeking candidates with knowledge of operating systems and database security.

The article focuses on the challenges and difficulties faced by companies while using data and technology together as per chairman Dame Diane Robertson of Data Futures Partnership. It talks about the government created group working with New Zealanders in developing guidelines for social licenses for data use by organisations. It tells about the guidelines being set inorder to promote safe use of data for the betterment of individual and the society.

The Office of Personal Management in the US sounds like an innocuous sort of agency. [ABSTRACT FROM AUTHOR]

The article presents myths that companies must resist to protect movable media. It notes that the importance of protecting such media is a challenge to managers who believe in such myths. It mentions that companies believe that tapes are already obsolete. However, Ken Rubin, senior vice president of Iron Mountain states that putting a collection of tapes in a vehicle and driving it to a recovery site is an efficient thing to do. Another myth that companies believe in is that only technical people have the responsibility of protecting tapes and laptops. Companies also believe that once equipment are already protected, they are already secured.

The article discusses the importance of keeping stored data using encryption and key management. It mentions how Becu, the largest credit union in Washington upgrades its storage equipment by choosing an application that encrypts tapes in their tape library. It states that more companies are upgrading their storage equipment and are adopting advanced technological innovations such as tape drive and tape library encryption. It notes that data security involves the protection of stored information. According to Gartner Inc., companies need to encrypt data not just because they want to, but they have to.

The article reports that several Western Australian (WA) government agencies have been asked to improve their database security after the state's auditor general Colin Murphy found weak passwords, inadequate patching and a lack of control over user privileges during an audit, as of November 2015. Topics include the systems audited in several agencies including Murdoch University, WA Department of Health, and the Department of Attorney General.

The article offers information on moving onto computer firm Microsoft from technology firm Google for data hosting by Macquarie University in Sydney, Australia. It mentions the views of Mary Davies, chief executive officer (CEO) at Macquarie University, on the priority of data security and the decision of Google to move stored data from Europe to the U.S. It states that Google makes no promises to user of the Google Apps about the location of hosting of data.

The article discusses the ways on how to prevent computer fraud caused by handheld electronics. According to Fabi Gower, vice president of information systems at health care recruiting firm Martin, various handheld gadgets could lead to network and data corruption. To avoid this type of problem, he offers tips on how to protect data from handheld gadget leaks. Among the tips are development of comprehensive computer security policy, prevent the unauthorized access to the network, and monitor user access.

The article reports on the postponement of the proposed antiterrorism project for money transfers in the U.S. The U.S. Department of the Treasury released a report to the Congress that the project funding sources for terrorists are technically workable. However, the Financial Crimes Network (FinCEN) agency does not believe that the database could be used before March 2010. The FinCEN has proposed progressive development process that includes a complete cost-benefit analysis management from the financial services industry and law enforcement agencies.

The article discusses how messaging administrators backup and restore messages, and provides information for new technologies used. Increasingly, experts have begun to focus instead on changing their mail systems' underlying storage platform from server-based, direct-attached storage (DAS) to some type of storage-area network that offers more options for faster, disk-based e-mail backups and restores. Looking for new technologies, messaging administrators are moving away from DAS to networked storage that offers snapshot technology closely integrated with Microsoft Exchange and Microsoft Corp.'s Volume Shadow Copy Service.

The article provides steps on how to ensure efficient remote storage backups with branch offices. First, work with branch employees to schedule back-ups for times when they will cause the least disruption to operations. Make a complete backup every week, with incremental backups on successive days. Keep the past four weeks' worth of backups, then recycle the oldest of the daily media into the next rotation. Second, make sure someone is in charge at the branch. Finally, make sure to review branch's own rotation cycles to make sure on keeping older backups.

The article provides best practices and latest techniques on backing up the user's desktops and laptops. In formulating a desktop backup strategy, the first step is deciding what to back up. The most convenient approach in terms of planning and restoring is to simply back up all of the files. One solution to backing up data is consolidation. It is a relatively simple task to force data into one folder, especially if the user is standardized on one set of application. The best repository for user's desktop or laptop backups is a reasonable amount of space in his centralized storage.

The article discusses how new technologies helped to backup groupware. Computing workgroups face unique challenges when it comes to system backups. These groups use collaboration software that allows them to update and pass along files. Local area networks designed around workgroups provide electronic sharing of required data. These workgroups can operate on their own or within an enterprise and are typically outside the data center. Without adequate backups, some companies might not be in compliance with applicable regulations because their workgroup backup data is not protected.

The article reports on a survey of data backup and presents pie charts depicting results of the research. According to the study, top executives at their companies know how critical backup technology is and spend accordingly. Seventy percent of the respondents reported only an occasional hiccup in their backup procedures. Fifty-four percent said that less than half of their information technology staffers are well knowledgeable in their department's backup procedures, and about one-third said that their companies' backup procedures are not documented.

The article discusses ways on how to protect corporate databases. The protection of databases involves the implementation of key defenses such as access control and authentication, vulnerability scanners, data access monitors and encryption. One of the key drivers is the Payment Card Industry which specifies some requirements for all companies which are receiving credit cards including logical access control, periodic network scans, encrypted transmission of cardholder data, and activity monitoring and logging.

The article provides information on SecureSphere Database Security Gateway (DSG) which shields data from malicious acts and mistakes. SecureSphere DSG has the capability to protect systems from a wide variety of unwarranted activity by limiting the types of queries that can be run, the times they can be run and the client programs that can run them. Planning is key when installing SecureSphere DSG. SecureSphere DSG can filter queries in Learning, Static and Dynamic. The SecureSphere Database Security is considered a very important part of a complete database security model.

The article reports on the need for third-party security relevant to the use of databases in the United States citing the insufficiency of security services provided by major database vendors. The director of strategic development at Franklin, Tennessee-based AIM Healthcare Services Inc., Adam Solesby emphasized the lack of security features for its database, despite the amount of license fees they pay for these commercial databases. Vendors were recommended to supplement additional requirements in providing their services to enhance database security.

This article explains that Sybase Inc. threatened to sue Great Britain-based security research firm Next Generation Security Software Ltd. (NGS) if it publicly discloses the details of eight security vulnerabilities found in Sybase's database software Adaptive Server Enterprise Version 12.5.3. Sybase's move is evoking sharp criticism from information technology managers but sympathetic comments from others. An IT manager thinks blocking the release of vulnerability information would set a bad precedent for the software industry. The license agreement for the Development Edition of the software prohibits the publication of performance testing and benchmarking results without Sybase's permission.

Discusses the job of information technology (IT) professionals in the U.S. Importance of knowledge on return on investment; Outlook of IT security jobs after the September 11, 2001 terrorist attacks; Views on the roles of senior-level security managers; Skills that IT professionals must possess.

Deals with the management of data warehouses to address concerns about information technology privacy and security. Determination of the data that needs to be protected; Measurement of the technical controls around the people who have access to the warehouse; Features of the tools that pull data from the warehouse that can protect data sets.

iiNet subsidiary Westnet has confirmed that it is investigating an alleged database hack. [ABSTRACT FROM AUTHOR]

Discusses how information system managers ensure security and integrity of distributed data. Challenges posed by spotting a break-in and finding the resources to audit security log files; Basic database rules; Human resource information system for workflow application based on an E-mail; Vendors' solutions to E-mail-based security issues; Replication systems; Distributive and collaborative application. INSET: Stalking the data trail..