Home

Online Social Networks – Launch pads for Malware

Your Expert Witness Malware By Aditya K Sood and Richard J Enbody - Regular contributors to the ISACA Journal.

With the advent of social networks, the online world has become a virtual society. Social networks serve as seamless communication channels, but at the same time they are ideal launch pads for malware infections. As a result there has been a tremendous increase in the dissemination of malware infections through social networks. The security and privacy mechanisms of social networks such as Twitter and Facebook have proven insufficient to prevent exploitation. As we know “To Err is Human,” and human errors lead to exploitation and manipulation whether the social network is online or offline.

What the Pro’s Know: Exchange Management that’s 7x Faster

Your Expert Witness David Gibson Varonis By David Gibson, Director of Technical Marketing and Strategic Sales at Varonis www.vasronis.com.

There is an evolution occurring with Exchange -- a shift from manual administration processes to automated management for critical Exchange tasks. Administrators who have moved to automation for activities such as the identification of mailbox owners, public folder owners, and stale data, activity spike detection, message activity auditing, etc. are finding their Exchange access and data management workload reduced by up to 70%.

ISACA Guide Outlines Web Security Vulnerabilities and Strategies

London, UK (24 October 2011)—The use of web applications has soared recently, due to the significant value they can add to enterprises by providing innovative ways to interact with customers. However, so have the dangers. Along with the benefits of these capabilities come security vulnerabilities that create dangerous risk and exposure. ISACA, a global association of 95,000 IT security, assurance and governance professionals, has issued a new, free white paper, titled Web Application Security: Business and Risk Considerations, which outlines the causes of web application vulnerabilities, examines the associated risk and impacts, and provides advice to mitigate risk. The guidance applies to all types of software development activities.

Venafi says ‘Son of Stuxnet’ Duqu Trojan should act as an alarm for IT security professionals

Reports that the ‘Son of Stuxnet’ malware – dubbed Duqu – has been spotted in the wild represents yet another significant security threat, says Venafi. The code for this malware appears to be written by an organisation with access to the original Stuxnet source code. Since Stuxnet is estimated to have taken ten man-years to develop, and has an extremely sophisticated code base, this new development should be a major worry for all organisations, big or small.

Imperva Releases First Comprehensive Hacker Forum Analysis

Study finds hacking discussions on one forum have grown an average of 157% from 2007 – 2010 and a major focus on “how to begin hacking”

Redwood Shores, CA – (October 17, 2011) – Imperva, a pioneer and leader of a new category of data security solutions for high-value business data in the data center, announced today the release of the “The Monthly Trend Report,” the fifth in the Hacker Intelligence Initiative research series. The report analyzes the content and activities of an online hacker forum with nearly 220,000 registered members, although many are dormant.