Tag: reports

Google said it would begin withdrawing trust from web sites with certificates issued by Symantec Corp.

Google Busts Symantec-Issued Certificates and Its a Big Mess

In-brief: Google’s rebuke of Symantec over its sloppy and problem-plagued certificate authority business risks upsetting some of the Internet’s biggest brands. 

Insecure network attached storage devices are the common thread in a string of data breaches, including the recent leak of US Air Force personnel files, security experts say.

NAS Holes: Air Force Data Leak the Tip of Very Large Iceberg

In-brief: The recently disclosed trove of personnel files by an US Air Force officer is one piece of a much larger phenomenon: exposed, vulnerable and Internet-connected network attached storage (or NAS) devices chock full of gigabytes sensitive data.

The US Department of Justice indicted four men for the hack of Yahoo. Two of them have links to Russia's FSB. What do the charges mean for relations between Russia and the US in the theater of cyberspace?

Podcast: What does the Yahoo Indictment tell us about Russian state hacking?

In-brief: The Department of Justice announced charges against four men for the attack on Yahoo that netted information on 500 million users. But what do we know about the men and their alleged crime? Security Ledger Editor in Chief Paul Roberts speaks with Igor Baikalov of Securonix about the incident. 

Companies should make life harder for cyber criminals by ceasing the use of valuable, "static" data to authenticate consumers. (Image courtesy of the Library of Congress.)

Opinion: Disrupt Fraud by Devaluing Data

In-brief: companies that want to make life difficult for cyber criminals can start by moving valuable data off the front lines and finding ways to use less valuable information to verify the identity of their customers, writes Keir Breitenfeld, who works for Experian’s Fraud & Identity Solutions group.

The tactics of cyber criminal hacking crews are indistinguishable from those of sophisticated, state sponsored "advanced persistent threat" groups, the firm FireEye said in its most recent M-Trends report.

Report: Hacking Crews are all APT now

  In-brief:The tactics of cyber criminal hacking crews are indistinguishable from those of sophisticated, state sponsored “advanced persistent threat” groups, the firm FireEye said in its most recent M-Trends report.