Through 2012, 60 percent of virtualized servers will be less secure
than the physical servers they replace, according to Gartner. Although
they expect this figure to fall to 30 percent by the end of 2015,
analysts warned that many virtualization deployment projects are being
undertaken without involving the information security team in the
initial architecture and planning stages. Read the full article. [Help Net Security]
The latest version of the Zeus do-it-yourself crimeware kit goes to
great lengths to thwart would-be pirates by introducing a
hardware-based product activation scheme similar to what’s found in
Microsoft Windows. Read the full article. [The Register]
In this wide ranging interview, cryptographer, Taher Elgamal, chief
security officer of Axway Inc. and initial driving
force behind SSL, explains how applications may be better adapted to
defend against attacks and how cloud computing may alter data
protection and authentication. Read the full article. [TechTarget]
LifeLock, an Arizona company promising
customers protection from identity theft, has agreed to pay $12 million
to settle charges that the company overstated its benefits and used
“scare tactics” to gain subscribers. Read the full article. [Computerworld]
North Carolina state researchers have modified existing speech authentication computer models and have streamlined the process so that it operates more efficiently. Read the full article. [ScienceDaily]
A Thai court has approved the extradition to the U.S. of a Malaysian
man allegedly involved in hacking credit card information, causing
massive losses for victims in the U.S. Read the full article. [Computerworld]
Cisco has released a number of reports on vulnerabilities in its products. It is possible to disrupt the transfer of voice data in the Unified Communications Manager using crafted SIP, SCCP and CTI packets. Read the full article. [The H Security]
Economic pressures are driving more businesses and governments to nervously eye cloud computing, despite
myriad unanswered questions that swirl around a single central concern: security. This was backdrop for a panel discussion
between CISOs at this week’s RSA Conference. Read the full article. [Network World]
Computer scientists say they’ve discovered a “severe vulnerability” in the world’s most widely used software encryption package that allows them to retrieve a machine’s secret cryptographic key. The bug in the OpenSSL cryptographic library is significant because the open-source package is used to protect sensitive data in countless applications and operating systems throughout the world. Read the full article. [The Register]
University of Michigan scientists have found they could foil RSA authentication by varying the
voltage supply to the holder of the “private key,” which would be the
consumer’s device in the case of copy protection and the retailer or
bank in the case of Internet communication. It is highly unlikely that
a hacker could use this approach on a large institution, the
researchers say. Read the full article. [ScienceDaily]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
