ISSA Omaha

Sep
25th

Fri

PCI virtualization SIG closer to proposing changes to standard A special interest group studying virtualization for the payment industry is preparing guidance on the use of virtualization and ways to maintain PCI DSS compliance.

Sep
23rd

Wed

Security Squad: Privacy gone awry SearchSecurity editors discuss Internet privacy issues, the Apache disclosure, VMworld and Apple security.

First Data, RSA push tokenization for payment processing The encryption-token service could compete against vendors offering format preserving encryption to secure payment transactions.

Sep
21st

Mon

Security challenges with cloud computing services Panel discusses cloud computing security issues including encryption and user authentication.

Sep
18th

Fri

New Bahama botnet evades search engines, fuels click fraud Researchers at Click Forensics have discovered a new botnet that is evading search engines and responsible for a spike in click fraud traffic and popup adware.

Sep
17th

Thu

Experts rebuke programmers who use SQL injection as feature Security experts point to online advertising campaigns that distributed faulty code to affiliates as the source of spikes in SQL injection attacks.

Sep
15th

Tue

Melissa Hathaway urges more cooperation, government attention to cybersecurity Former acting director for cyberspace Melissa Hathaway called for public-private cooperation on cybersecurity and pressed government to develop standards and foster innovation.

Secure virtual desktop software enables remote client security Virtual desktops control endpoints and cut costs for an Atlanta-based financial company. The setup helps IT control core essentials and enforce acceptable use policy.

Brute force attacks target Yahoo email accounts Attackers target a background Web services authentication application used by ISPs and Web applications to authenticate users.

SANS: Application threats, website flaws pose biggest security threats A new report from the SANS Institute calls flaws in client-side applications often the most ignored by IT professionals.