Network Security

Researchers find more versions of digitally signed Mac OS X spyware

The malware is connected to Indian cyberespioange operation and has been active since at least December 2012, researchers say

IT security vendors seen as clueless on industrial control systems

Even the most innocuous security processes used for traditional IT systems could spell disaster in an ICS

Nation’s power grid under constant cyberattack, but Congress lax

Utilities' cyber defense efforts said to be rapped by legislators, Congressional report finds

Twitter aims to become safer with two-step sign-in

Users can now have a code sent to their mobile phones to log in

New Citadel malware variant targets Payza online payment platform

The Trojan program adds a rogue PIN field to the Payza log-in page on infected computers, Trusteer researchers say

U.S. power companies under frequent cyberattack

Legislation that would give the federal government power to oversee the protection of utilities has stalled

Researchers find critical vulnerabilities in popular game engines

Attackers could exploit the flaws to compromise game clients and servers, researchers from ReVuln said

Digital strongboxes won’t solve whistleblower problem for journalists

Strongbox preserves anonymity at the price of authenticty

Pressure mounts for building in security during application development

Security Manager’s Journal: NAC deployment means better access control at last

A NAC initiative so far has revealed a whole lot of devices that don't meet the criteria for getting on the network.