Security Channel

Network security news, reviews, and advice on malware defense, data security, hacker countermeasures, and security management.

Security Articles

Security researcher urges IT managers to keep up with SAP patches

Security firm Onapsis found more than 95 percent of SAP systems tested were vulnerable, but companies often don't realize they are

Should you care that Siri is taking notes?

IBM blocks Siri on networked devices even as it acknowledges it sees no threat in Apple capturing voice commands from users

Yahoo leaks private key, allows anyone to build Yahoo-signed Chrome extensions

Yahoo accidentally leaked the private key that was used to digitally sign its new Axis extension for Google Chrome

Bug bounty hunters reveal eight vulnerabilities in Google services

Two security researchers explain at the Hack in the Box conference how they found so many bugs in such a short space of time

10 hacks that made headlines

Hacking has been around for decades. Today's crimes are often financially motivated fraud. Here are 10 hacking incidents that made history

It's time to run .Net out of town

In yet another massive patching failure, Microsoft released three automatic updates that failed to install on Windows XP and Windows Server 2003

Could the .secure domain make the Internet safer?

Security firm argues that by imposing meaningful standards, websites will gravitate to validated domain -- not everyone agrees

New ways to track you via your mobile devices: Big Brother or good business?

A new technology called IPS can track your every move -- or help you find a departure gate at the airport. Should we fear it or embrace it?

Google warns users infected with DNSChanger as Web outage nears

Infected PCs and Macs trigger unusual warning on Google's search site notifying them that their systems will be severed from the Internet on July 8

5 from Forrester: Rising and declining security technologies

Forrester's TechRadar report predicts which security technologies will grow and which will diminish in the coming years

Security Page

InfoWorld's Security Boot Camp

Are your network defenses feeling a little flabby? InfoWorld's Security Boot Camp will whip your IT operation into shape in next... more

Security White Paper

Information Security and Multi-Compliance

It’s common for information security managers to be held responsible for situations where they have little control or... more

Security Blog entry

Let your worst fears be your guide

Your computer security defense should be built with the assumption that all attackers are trusted, highly privileged insiders... more

Event log management made easy
SECURITY ADVISER
Event log management made easy

Blog by Roger A. Grimes

Most companies' log files carry too much noise. For a better log management system, turn the normal model on its head
Security Deep Dives
Download the PCI Compliance Deep Dive report:

One of the most important industrywide computer standards, PCI is also one of the most specific, comprehensive and prescriptive. Any....

Download the Malware Deep Dive Report:

If malware were biological, the world would be in the grip of the worst pandemic in history. In 2009, over....

Download the BYOD and Mobile Strategy Deep Dive:

iPhones, iPads, Androids, and more are joining your business's suite of technology tools, driven by user demand and need. Most....

Featured Sponsor
White Paper

White Paper

Sophos Security Threat Report 2011

Last year's cyberattacks, like Aurora and Stuxnet, demonstrates that malware lurks everywhere and tricks even the most scrupulous user. Our threat experts see 30,000 new malicious URLs each day—70% of which are legitimate websites that were hacked. Let our new 2011 Security Threat Report be your weapon in the battle against malware. It describes the significant threats of 2010, what to watch for in 2011, and more importantly, what you need to do to get ahead of them.

Download now! »
White Paper

White paper

Eight threats your anti-virus won't stop: Why you need endpoint security

News headlines are a constant reminder that malware attacks and data leakage are on the rise. High-profile incidents that make big news might seem out of the ordinary. Yet businesses of every size face similar risks in the everyday acts of using digital technology and the internet for legitimate purposes. This paper outlines eight common threats that traditional anti-virus alone won't stop, and explains how to protect your organization using endpoint security.

Download now! »

White Paper

Malicious JavaScript Attacks: What Can You Do?

As an IT manager, you need to be able to effectively secure all of the websites you manage to avoid attack and the subsequent infection of site visitors. You also need to protect the users within your organization from becoming victims of malware. Organizations can use specific technologies and layered protection strategies to safeguard websites and shield employees. We'll review what to watch for, as well as the security strategies that will help keep you safe.

Download now! »
©1994-2012 Infoworld, Inc.