Identity and Access Management

Experts ding DHS vulnerability sharing plan as too limited

Without universally availability, plan could miss smaller businesses hackers could use as an entry point to critical infrastructure companies

Feds’ offensive fueling hacker underground, report says

With the government said to be the biggest buyer of malicious tools, some fear it will weaken the nation's cyber defenses -- public and private

Companies, government unprepared for new wave of cybersabotage

Intelligence not the only part of government that has struggled. Senate has not moved on legislation to back President's order on cybersecurity

Academic institutions urged to take steps to prevent DNS amplification attacks

REN-ISAC advises members to secure their DNS servers and implement network filtering to prevent spoofing

Google’s five-year plan for authentication: It’s complicated

Some of the technology has to be deployed together for maximum security, making the process complicated, said one security expert

Payment card processors hacked in $45 million fraud

U.S. federal prosecutors indicted eight people accused of running a vast carding scheme

The Onion explains how its Twitter account was hacked

The attack compromised several Google Apps accounts, one of which controlled The Onion's Twitter account

PayPal Says It’s Time to Ditch Passwords and PINs

Name.com forces customers to reset passwords following security breach

Account passwords and credit card information were encrypted, the company claims

Lesson from the Google office hack: Do not trust third-parties

Many Tridium Niagara systems in use today are left unpatched, and the company acknowledges there's a problem with update deployments