ISSA Omaha

Sep
4th

Fri

Security threats to virtual environments less theoretical, more practical The demonstration of a hacking tool at Black Hat that allows attackers to escape from virtual machines to attack their guest OS elevates the seriousness of security threats to virtualization.

Truth, lies and fiction about encryption Encryption solves some very straight-forward problems but implementation isn’t always easy. We’ll explain some of the common misperceptions so you’ll understand your options.

2009 Information Security magazine Readers' Choice Awards For the fourth consecutive year, Information Security readers voted to determine the best security products. A record 1721 voters participated this year, rating products in 17 different categories.

Schneier-Ranum Face-Off: Is Perfect Access Control Possible? Security experts Bruce Schneier and Marcus Ranum debate whether perfect access control is possible.

Sep
3rd

Thu

Unpatched vulnerability discovered in Microsoft SQL Server

Database security vendor Sentrigo today released some detail about a flaw discovered a year ago in Microsoft SQL Server that exposes passwords stored in memory as cleartext. Microsoft is not planning…

Sep
1st

Tue

Security fundamentals remain focus of virtualization deployments Companies are avoiding virtualization security technologies until the market matures and established security vendors address threat mitigation and compliance issues.

Aug
31st

Mon

Skype Trojan records VoIP communications Called the first wiretap Trojan, Peskyspy, targets Skype conversations by intercepting and recording audio between the Skype application and the victim’s audio device.

Aug
29th

Sat

SSH key compromise shuts down Apache website Attackers forced Apache to shut down its website for several hours Friday morning, using a compromised SSH key to gain access to one of its servers.

Aug
28th

Fri

Security expert's PCI analysis misguided, says PCI Council GM The PCI Council asserts that everyone in the payment chain should play a role to keep payment information secure, says Bob Russo, general manager of the PCI SSC.

Aug
27th

Thu

Social network privacy study finds identity link to cookies Researchers raise privacy concerns as a person’s browsing habits could be paired with their identity and passed to third-parties.