Security

South Carolina breach exposes 3.6M SSNs

Another 387,000 credit and debit cards also exposed in Department of Revenue intrusion, but most were encrypted

DOJ: Dotcom could face new charges if he launches new service

The agency questions Dotcom's plans to launch a service similar to Megaupload

Critical flaw found in software used by many industrial control systems

CoDeSys runtime flaw allows hackers to execute commands on critical industrial control systems without authentication, researchers say

Startup claims it saw early signs of Amazon’s cloud outage

Noticed abnormal activity among customers two hours before Amazon announced outage

Google’s email security flaw embarrassing, but no catastrophe

DomainKeys Identified Mail (DKIM) vulnerability highlights need to upgrade to stronger keys as they improve

Ready for a data breach? How to develop your response plan

Open DNS resolvers increasingly abused to amplify DDoS attacks, report says

The frequency of DNS-based DDoS amplification attacks has increased, researchers say

Preparing your business for mobility

Line blurs between insider, outsider attacks

Underground forums provide insider access to enterprises

BYOD resistance loosening but security practices lacking

SANS survey of more than 650 IT and security professionals shows access control and VPNs favored for mobile