LATEST NEWS

Anonymous declares 'trolling day' on ISIS

Hacktivist collective Anonymous said it will continue its cyber assault on ISIS, declaring Friday, December 11, a trolling day against the terrorist group.

Social media in the firing line in battle to stamp out terrorism

The tech world is being urged to try and help in stopping terrorists who might be using social media to recruit, communicate and plan attacks.

Hashcat advanced password recovery now open source

The popular tool of penetration testers and forensic scientist will now be available under open source license.

TuneCore database hacked, personal customer data stolen

TuneCore's database was breached on Friday. Security experts and authorities are working with the online music distributor and record label service to track down the cyber-criminals.

Apple security updates: a sign of things to come

While Patch Tuesday is a well-known event for Microsoft and Adobe users, Apple product owners this week received a dose of reality when they found themselves on the receiving end of several security updates.

Opinion

Opinions What IT security can learn from the credit fraud paradigm

What IT security can learn from the credit fraud paradigm

We've all received a call at one point or another from the fraud protection departments of our credit card providers, telling us they've detected some suspicious activity on our accounts and would like to verify a few recent charges.

Opinions The Security Vulnerability You Can Prevent

The Security Vulnerability You Can Prevent

The Internet of Things is one of the world's fastest growing technologies. Unfortunately, it is also poised to become the fastest growing source of security vulnerabilities in the enterprise - but it doesn't have to be that way.

Opinions All Talk-Talk and No Action

All Talk-Talk and No Action

The latest cyber attack, a breach compromising the data of up to four million of Talk-Talk's loyal customers, is yet another in a growing line of pernicious cyber attacks against corporate infrastructure.

Featured: Cybercrime

McAfee Enterprise Security Manager failed to manage own security

McAfee Enterprise Security Manager failed to manage own security

Hard-coded username allowed access to the McAfee Enterprise Security Manager as master user without authentication or password.

The Threat Hunter Blog

A stealthy Command and Control Python App That Uses Twitter

A stealthy Command and Control Python App That Uses Twitter

I enjoy following darknet.org.uk because they come up with some great proof of concept projects. Twittor is one of those.

Product Reviews

Acuity Risk Management STREAM Integrated Risk Manager

starstarstarstarstar
STREAM is an integrated risk management tool delivered as a software product consisting of a database server, an application server and a client component.

Agiliance RiskVision

starstarstarstarstar
This is a hybrid application. It has many of the aspects of a traditional GRC platform and many of the technology-centric attributes. But, for all of that, it is biased toward risk management, albeit with many other GRC trappings.

AlgoSec Security Management Suite

starstarstarstarstar
This is a very specialized product. Its premise – and a good one it is – is that the firewall(s) manage the risk in any system.

Allgress Insight Risk Manager

starstarstarstarstar
This is an interesting product. It focuses on taking GRC into an IT environment and aligning it with business priorities to manage security and compliance.

November issue now available

Sign up to our newsletters

RECENT COMMENTS

FOLLOW US