Cybersecurity News

RSS

In last month’s column, we explored the Top Five Reasons to Report Computer Intrusions to Law Enforcement.  This month’s column will provide you with a sense of what your company, as a victim of a computer intrusion, should expect when working with the Feds.

In an effort to thwart snooping from the NSA and other entities, Twitter has implemented "perfect forward secrecy," which should make it impossible to decrypt any stolen or eavesdropped communication in the future. 

Vermont confirmed that a security breach of the state’s health-care exchange Web site gave at least one user access to another resident’s Social Security number.

Hackers reportedly stole 42 million customer records, including email addresses and clear-text passwords, from Cupid Media’s network of dating websites. A file containing the Cupid Media user data was found on the same server where hackers also stored millions of records stolen from Adobe, PR Newswire, the U.S. National White Collar Crime Center and other organizations.

New York financial regulators have surveyed more than 200 banks and other financial institutions about their cyber security and will soon expand their analysis to insurers with trillions of dollars of assets, according to an Associated Press report.

New York Governor Andrew Cuomo announced Monday that the New York State Intelligence Center has relocated to the Center for Internet Security in East Greenbush, New York, putting the state’s primary cyber security protection agency under the same roof as a leading nonprofit organization dedicated to enhancing cyber security readiness and response around the globe, according to a Long Island press release.

The legal consequences of cyberattacks, such as class-action lawsuits on behalf of victim third-parties, are a growing worry of business owners, and businesses without cyber insurance are vulnerable to cybercrime and any consequential litigation, according to Solace Insurance.

Amid calls for stronger cyber security laws, the Department of Homeland Security is working on getting its threat-tracking system to work across its own operations and the Department of Defense. An October 24 memo from the Office of the Inspector General found that although the DHS can keep track of threats and provide updates on ongoing issues, “federal cyber operations center do not have a common incident management system tool that tracks, updates, shares, and coordinates cyber information with each other.”

Microsoft has expanded its $100,000 bounty program Monday, and will accept reports of in-the-wild attacks that demonstrate new techniques of bypassing Windows’ anti-exploit technologies, Computerworld reports.

Frederick Chang recently joined Southern Methodist University to develop a multidisciplinary program to tackle the most pressing cyber challenges facing the world today.