Security Spotlight

RSSSubscribe to this blog
About Author

Contact Author

Email Security


Recent Posts

Why 2012 is the year of Public Key Infrastructure

Comodo, Sony, RSA Security and why it isn't over for PKI

The IT security world has been shaken by a series of breaches that some say spells the death of Public Key Infrastructure (PKI) technology. Comodo, Sony, RSA Security and other breaches have seen established and trusted organisations fall from grace...

Tags: certificate authority, computer security, public key infrastructure, rsa, security, venafi

Alan Turing notes on cryptography released

Are there any insights left to be wrung from the code breaker's papers?

Chris Vallance of the BBC reports that GCHQ has released some of Alan Turing’s papers on the theory of code breaking. They’re not on display at the National Archives at Kew. I’ve checked the web pages of the Archives and...

BYOD - It's time to throw out the rule book

Rather than playing catch up, do you want to get ahead of the game so you're prepared for tomorrow's world?

Employees have differing views when it comes to what they like - not every one wants a Volkswagen Golf, and many company car schemes take this into consideration. As a concept it works fantastically - instead of having a pool...

Security hardening iPhones and iPads

Get this how-to guide to Tablet and smartphone security

BYOD, or ‘Bring Your Own Device’ is one of the IT trends that I’m sure you know about, if not by that name. Driven by the users themselves, who go out and get cool new kit - iOS, Android, their...

Tags: blackberry, entrust, ios, ipad, iphone, mobile & wireless, security, smartphone, tablet

Preventing email data losses - don't boil the ocean

How can organisations protect against data losses, without drowning in email traffic?

The Information Commissioner’s Office (ICO) has issued its first fine for data breaches by email this year, to a Council that sent sensitive personal information to the wrong recipients. Following two previous breaches, the Council in question was fined £120,000...

Tags: data loss, data loss prevention, email, employee, enterprise data, security

Five hacker tricks you should be defending against

The most common web attack techniques

Vulnerabilities are everywhere. Knowing where they are is useful, but knowing which one will be exploited is much more useful. Security professionals need to focus on real threats plaguing today’s practitioners and provide up-to-date statistics on actual attack data. As...

Tags: hacker, hacking, php, security, sql injection, web application, xss

SSL domain authentication needs improvement

Should we really be taking the domain owner's word for it?

In her Dark Reading article, "Is SSL Cert Holder ID Verification a Joke?", Ericka Chickowski discusses if certificate authorities do enough identity checking for Domain Validated (DV) certificates. I am myself perhaps notorious for writing that it's not a joke,...

Tags: authentication, domain, security, ssl

Does RSA understand what happened to them?

This was not just an attack on RSA, it was an attack on all of us

In Tim Greene's article, "RSA security breach has silver lining, says CEO," he quotes Art Coviello as saying "…we were able to minimise the damage…" and that "we've been engaged with customers at a strategic level as never before...

Tags: entrust, hacker, rsa, security

Learning from the AstraZeneca email blunder

Made a mistake? Don't draw attention to it

Leo King's article in ComputerWorld, "AstraZeneca in confidential email blunder," discusses a relatively common thing that happens -- someone sends information they didn't intend to in an email. In this instance, AstraZeneca had to restate their earnings because the email...

Tags: astrazeneca, email, entrust, security

EU "No Disconnect Strategy" something to praise

Get involved to make it work

The EU Vice President, Neelie Kroes, has put out a call for what she calls the "No Disconnect Strategy," in which the European Union will provide technical assistance to human rights workers and protesters throughout the world. The press release...

Tags: copyright, eu, european union, karl-theodor zu guttenberg, neelie kroes, no disconnect strategy, privacy, security, terrorism