Identity and Access Management

Oracle’s Java security improvements don’t quite satisfy

LinkedIn aims to keep hackers out with two-factor login

Once the feature is enabled, users will get a code sent to them when logging in from a new device

Oracle reveals plans for Java security improvements

The company will make changes that suggest it's listening to feedback from the security research community

Amazon Web Services integrates with Google, Facebook for easier logins

Developers can integrate web-based sign-in platforms without having to write any server-side code

Spear phishing paves road for Advanced Persistent Threats

Specialized spam can be more than it seems -- it sets up a beachhead for malware mischief

Twitter’s two-factor authentication implementation can be abused, researchers say

Attackers could use it to lock users out of their accounts if they steal their log-in credentials, F-Secure researchers says

Twitter’s two-step authentication a good start, experts say

For celebrities and the average Joe, having two-factor authentication turned on won't protect them against determined hackers

IT security vendors seen as clueless on industrial control systems

Even the most innocuous security processes used for traditional IT systems could spell disaster in an ICS

New Citadel malware variant targets Payza online payment platform

The Trojan program adds a rogue PIN field to the Payza log-in page on infected computers, Trusteer researchers say

Pressure mounts for building in security during application development