Synopsis:
The first PC viruses appeared more than 25 years ago. Little did we realise that this was just the beginning of what would become a series of threat waves. Today, we find ourselves combatting advanced malware, targeted attacks and advanced persistent threats (APTs). This article will discuss how we raise our game to defeat this new class of attackers.
Today's business environment has become more regulated - with different mandates and requirements spanning multiple industries and regions. Some regulations require multiple audits per year and depending on your industry, you may have to comply with multiple regulations. Even if you don't have to comply with the bevy of standards or requirements such as PCI-DSS, SOX, NERC CIP, HIPAA, and so on, you most likely still have (or you SHOULD have) internal reviews and checks of security policies.
Over the weekend, we saw many reports about the Evernote breach. This serves as a timely reminder about the risks to data – in this case 50 million users’ credentials. The good news is that it seems Evernote took the right steps to protect that data – using salted hashes. If this was performed correctly, then users should not be concerned about their passwords being compromised. Evernote took the right steps to reset everyone’s password too for good measure. The attack took place on Feb 28th, and they notified relatively quickly, a couple of days later – not bad really. So, best practices prevailed despite the attack.
At last week’s RSA Conference 2013 in San Francisco, a clear consensus emerged: attacks on the trust established by cryptographic keys and certificates are on the rise and important element in today’s threat landscape. In the Microsoft keynote, Scott Charney, corporate vice president for Trustworthy Computing, declared “PKI is under attack.” Charney explained how criminals are obtaining unauthorised digital certificates or misusing cryptographic keys to enable further attacks.
To expose official corruption in Nigeria, re-orientate the psyche of Nigerians and usher in the Nigerian renaissance
Have you got news/articles for us? We welcome news stories and articles from security experts, intelligence analysts, industry players, security correspondents in the main stream media and our numerous readers across the globe.
Vigilance is the brain child of a group of veteran journalists and international scholars who have worked in the mainstream media and distinguished themselves nationally and internationally before veering into security practice.
We have 286 guests and no members online