Stories by Ellen Messmer

IBM anoints Q1 Labs technology as centerpiece of security portfolio

IBM intends to make the security information and event management (SIEM) technology gained through the acquisition of Q1 Labs, which was officially closed yesterday, the centerpiece of IBM's broad security product portfolio.

Massive DDoS attacks a growing threat to VoIP services

ORLANDO, Fla. -- When the massive distributed denial-of-service (DDoS) attack in March brought down the voice-over-IP (VoIP) call processing supplied by TelePacific Communications to thousands of its customers, it marked a turning point for the local...

PCI point-to-point encryption guidelines raise new questions

The PCI Security Standards Council today is expected to issue guidelines on use of point-to-point encryption in protecting sensitive payment card data, but the narrow approach — which is focused on hardware — is raising questions.

Symantec cloud-based service seeks out 'rogue certificates'

Symantec this week introduced what it calls the Symantec Certificate Intelligence Center, a cloud-based service that works with an on-premises software component to keep track of SSL server certificates used by an organization.

Security vendors push intrusion-detection, professional services

Established vendors and startups last week announced products and services for network intrusion-detection and outsourced security management.

HP's 'Secure Boardroom' gives execs comprehensive view of corporate security posture

HP today unveiled "Secure Boardroom," an online portal where the corporate CEO, CIO and risk officer can be presented with a view of technical and business information related to operational security.

Start up offers Saas app to manage data-breach incidents

If your company suffered a data breach, would you know what to do to comply with state, federal and local law? Start-up Co3 Systems is offering a software-as-a-service (SaaS) application to tackle that unhappy task, tracking how a corporate data-loss...

Android now most attacked mobile OS, McAfee reports

Google's Android operating system is now the most-targeted mobile platform for malware, according to McAfee's latest threat report.

NSTIC director: 'We're trying to get rid of passwords'

The federal government's National Strategy for Trusted Identities in Cyberspace (NSTIC) program, set up this spring, is making progress against its goal of identifying and supporting more secure alternatives to simple passwords that the government as...

Heartland unveils mobile-payment device for Android

Heartland Payment Systems today unveiled a mobile-payment device for merchants called "Mobuyle" that works with any Android phone or tablet to handle customer card payments.

VMware preparing data loss prevention features for vShield

At the upcoming VMworld conference, VMware plans to highlight new data-loss prevention capabilities in an updated version of its virtual system security product, vShield.

McAfee gets defensive: Massive cyber attack revelation not being used as a security sales tactic

McAfee today published a report that tells how it discovered evidence in a server on the Internet of stealthy intrusions, probably by an unnamed "nation-state," into 72 businesses and government agencies since 2006. The goal, says McAfee, is to steal...

E-commerce sites based on open source code under attack

About 100,000 Web pages for e-commerce sites based on the open source OS Commerce software have been compromised with malware through a mass iFrame injection attack, according to security firm Armorize.

The 5 biggest IT security mistakes

Like cleaning the windows, IT security can be a thankless task because they only notice when you don't do it. But to get the job done in the era of virtualization, smartphones and cloud computing, you've got to avoid technical and political mistakes....