Identity and Access Management

DOJ charges five members of Chinese army with hacking US groups

The defendants stole trade secrets from Westinghouse Electric, United States Steel and other companies, the DOJ says

Identity and access management for 10 million users? No sweat!

How retailers can boost security through information sharing

Microsoft’s .NET Framework security updates further effort to phase out RC4 encryption

The company advises customers to stop using the RC4 cipher in TLS connections because of known weaknesses in the algorithm

With the Internet of Things, smart buildings pose big risk

As buildings get more automated, they raise new security risks

Research gives reason to double-check Heartbleed fix

Estonian electronic voting system vulnerable to attacks, researchers say

International research team finds insecure operational procedures and fundamental weaknesses in Estonian Internet voting system

MIT recruits Batman to help students pick usernames

Because you wouldn’t want to be saddled with bruboy12

Rush to defend against Heartbleed leads to mistakes with certificates, patches

Some reissued SSL certificates use the same vulnerable key as the ones they replace, and some sites moved to a vulnerable version of OpenSSL

Bitly discloses account compromise, urges users to change passwords

Company said account credentials were compromised, but refused to provide details