Report: China Probing Soft Cyber Underbelly
By Tom Groenfeldt, Technology Journalist - Contributor at CIOZone
In China today, there are thousands of people in a sustained effort to collect intelligence, many of them on an entrepreneurial basis within a competing bureaucratic structure. China understands that a strategic vulnerability of the United States is its soft cyber underbelly. I believe they seek to ‘own’ that space, says Mike McConnell, former director of National Intelligence and director of the NSA.
TSA Breach is a Nightmare for Holiday Travel
Laura Wilson, JD, CISA
This week’s revelation that the Transportation Safety Administration exposed its rules for airport security screening online is outrageous. As holiday travel ramps up, the possibilities and repercussions are horrifying. Coupled with the huge rise in information security breaches across many sectors and rampant identity theft, the TSA’s breach sets the stage for potential disaster.
Massive TSA Security Breach Revealed
By BRIAN ROSS and MATT HOSFORD of ABC News
In a massive security breach, the Transportation Security Agency (TSA) inadvertently posted online its entire airport screening procedures manual, including some of the most closely guarded secrets regarding special rules for diplomats and CIA and law enforcement officers.
Cyber Liability Insurance Mitigates Exposure
By Laton McCartney, Editor at CIOZone
CIOs are starting to embrace the idea of protecting against the risk that comes about as the unintended consequence of Web 2.0 technology. At the same time, data is becoming increasingly regulated, which is creating new exposures, particularly in the areas of data privacy and reputational risk,” Drew Bartkiewicz, vice president of cyber and new media risk at The Hartford, tells CIOZone’s Latom McCartney.
Ten Most Damaging Data Breaches of 2009
By Laton McCartney, Editor at CIOZone
Every week for the past four years the Privacy Rights Clearing House has been chronicling data breaches on a weekly basis. “These are the mega-breaches that can skew the figures in terms of the number of people victimized,” says Paul Stephens, PRCH’s director of policy and advocacy. Here are the ten biggest, most damaging and most embarrassing breaches to date this year.
Symantec CEO Optimistic About IT Spending
By Cara Garretson, Veteran Business and Technology Journalist
Symantec isn’t the only company to forecast improved enterprise IT spending based on quarterly results in the past few weeks; executives at EMC, IBM, and Intel all spoke positively about IT budgets rebounding in the coming months.
Top Ten Email Related Disasters of 2009
BY Mel Duvall, Chief Content Officer at CIOZone
Forget about vampires, ghouls and zombies. You were much more likely to receive a fright this year from something lurking in your e-mail. There were the usual crop of Trojan horses and phishing expeditions, and as the surprising list points out, some of the scares go all the way up to White House and the FBI.
Major Security Hole in Time Warner Routers
By Cara Garretson, Veteran Business and Technology Journalist
An intruder could eavesdrop on sensitive data sent across the Internet, manipulate the DNS address that redirects traffic from trusted sites to malicious ones, and possibly even infect other routers automatically. Chen says he informed Time Warner’s security department of the hole; they responded that they were aware of the problem but couldn’t do anything about it.
The Truth About Regulatory Compliance
By Steven Fox, Founder of SecureLexicon
Given the business impact of regulations like PCI DSS, Sarbanes Oxley, and GLBA, this is understandable. While savvy business leaders understand the limitations of these guidelines, there are among us less enlightened individuals who view these as a cure for organizational security issues.
Black Hat: Articulating the Value of Security
By Steven Fox, Founder of SecureLexicon
How do we market security? The cyber-bullies among us might still use Fear, Uncertainty, and Doubt. While this may produce short term acquiescence, that approach ultimately alienates us from the decision makers. Ultimately, security professionals must identify what is valuable to the business and then associate the need for security with those assets
