Uncategorized


Southern California Man Gets 11 Years in Slammer for ID Theft Ring

Martin Quoc Pham, 28, of Garden Grove was sentenced by a judge to 11 years in Federal prison for spearheading an identity theft ring targeting home equity lines. The compromised accounts of JP Morgan Chase customers were fraudulently accessed and lines of credit were stolen including nearly $1 million that was transferred to accounts controlled by the ring.

Guardian Jobs Site Hacked, Data Stolen

In
what is being described as a “deliberate and sophisticated crime,” the
Guardian newspaper in the U.K. says the careers section of its Web site
was hacked, exposing sensitive data belonging to about half a million
users.


A former Ford Motor Company engineer has been indicted on charges of theft of trade secrets, attempted theft of trade secrets and unauthorized access to protected computers.  Xiang Dong Yu, also known as Mike Yu, was arrested last week as he entered the country at Chicago O’Hare International Airport. 

Andy Weeks, manager of risk and compliance for enterprise information security, at Humana Inc., one of the larger companies in the world, knows a thing or two about large-scale security implementations. And in  a company whose customer data is one of its main assets,  security is a corporate imperative. Discover the strategies that Weeks and Humana employ to keep the company ahead of the curve.Listen to the podcast:

In the first installment of a new regular series, Dennis Fisher talks with Bob Maley, the CSO of the Commonwealth of Pennsylvania, about the challenges of running an information security program in a government agency, the effects of the economy on his efforts and the ways in which user education can affect security in any organization. Listen to the podcast:
Read the transcript

Like every other security executive in the health care industry, Larry Whiteside, CISO of the Visiting Nurse Service of New York, spends much of his time dealing with compliance-related issues. But the distributed nature of his user population means that he has sensitive patient data on thousands of mobile devices all over the state. Learn how Whiteside balances compliance demands with security realities to keep data secure while maximizing efficiency.

Just 4% of users of corporate systems abide by IT security policies, even when that system handles very sensitive private information according to an academic survey [pdf] that has revealed humans to be the main flaw in any security system.

Researchers at the University of Wisconsin-Madison and  IT University, Copenhagen found that just 4% of the people surveyed obey best practice rules for passwords. The rest use the same passwords for different systems or use words that appear in the dictionary or write their passwords down on post-it notes beside the computer.  Read the full story [out-law.com]