Tech Center Attacks and Breaches
Dark Reading's Attacks and Breaches Tech Center is your destination for breaking news and information about the latest cyber attacks and compromises affecting today's enterprises. Written for IT security professionals, the Attacks and Breachess Tech Center is designed to provide in-depth information on the latest and most critical exploits and details on how major breaches occur - and how your organization can learn from them.
Featured Commentary
-
Larry SeltzerWho Supplies CyberBunker?
The hosting company behind CyberBunker, the company allegedly behind the DDOS attacks on Spamhaus, connects to the Internet through other providers. Perhaps the only way to pressure those responsible for the attacks is to put pressure on the upstream providers.
News
-
'Hacking' Journalists Case Dredges Up Security Research Legal Debates
Telecom firm TerraComm seeks to sue Scripps-Howard journalists for Google searches that uncovered sensitive info freely available online
-
New Congressional Report Illuminates Attackers' Focus On Electric Grid
Regular attack attempts on electricity providers, malware infections threatening the power grid
-
Google Aurora Hack Was Chinese Counterespionage Operation
Attackers were after U.S. government surveillance requests for undercover Chinese operatives, say former government officials.
-
Even SMBs Should Look To Log Management For Security
A firewall, patch procedure, anti-malware and, possibly, an IDS are a good start. But to detect breaches, small and medium businesses should focus on logging activity and looking out for suspicious behavior
-
'Commercialized' Cyberespionage Attacks Out Of India Targeting U.S., Pakistan, China, And Others
Operation Hangover signals new franchise model in cyberespionage with cyberspying services for hire
More Stories
- Pakistan Hit By Targeted Attack Out Of India
- Pushdo Botnet Morphs To Elude Hunters
- LulzSec Hackers Get Prison Time in U.K. For Cyberattacks
- Internet Crime Cost Consumers More Than A Half-Billion Dollars Last Year
- New Algorithm Lets SCADA Devices Detect, Deflect Attacks
By The Numbers
Targeted Malware Top Server Security Concern
52 percent of IT security pros say targeted malware is their top server security concern--up 15 percent from 2011.
Source: Bit9
Commentary
-
Much Ado About PushDo
We don't need a stretcher -- we need a mop
-
How To Bug Mitch McConnell's Office
'Bugging' in the context of politics raises images of burglars messing with telephones and clunky tape recorders in the Oval Office. Now you'd just use malware
-
Who Supplies CyberBunker?
The hosting company behind CyberBunker, the company allegedly behind the DDOS attacks on Spamhaus, connects to the Internet through other providers. Perhaps the only way to pressure those responsible for the attacks is to put pressure on the upstream providers
-
You've Been Hacked, But For How Long?
One of the big themes at the recent RSA Conference was awareness of threats already inside the network. The way you learn about these threats and lower your ‘Mean Time To Know’ (MTTW) about an intrusion is with profile-based network monitoring
-
Evernote Resets Everyone's Passwords After Intrusion
By Larry Seltzer
After detecting a coordinated intrusion into their network, Evernote forced a system-wide password reset today. The attackers were able to access Evernote user information, which includes usernames, email addresses associated with Evernote accounts and encrypted passwords
Around the Web
Dark Reading Reports
-
The 8 Most Common Causes of Data Breaches
It seems as though not a day goes by without a headline screaming that some organization has experienced a data breach, putting the business -- and its customers and partners -- at risk. To keep your own organization out of the news, it's important to understand the most common causes of data breaches and what you can do to mitigate the threats they present.
-
Offensive Cybersecurity
Offense is the new defense for private-sector security professionals, some pundits would have you believe. Whether you call it "hacking back" or old-fashioned eye-for-an-eye retaliation, offensive security calls for profiling and, if possible, individually identifying an attacker and taking countermeasures to harm the attacker's systems. Governments have experimented with offensive security and have their own reasons and hesitations around pursuing it. For the private sector, though, it's a controversial approach that IT and business leaders should understand.
Related Content
-
Data Security in the Cloud
How do you embrace the benefits of the cloud while maintaining security controls over your organization's assets? Learn the latest cloud security challenges and techniques for protecting data in the cloud. Get practical strategies for secure transition to the cloud.
-
Securing Big Data
We are awash in data, but enterprises must still protect their sensitive data, no matter where it resides. Traditional data security approaches such as perimeter security have proven to be permeable and put big data initiatives at risk. Learn about a new way to safeguard sensitive information in big data environments.
-
Simplify Data Security for Cloud Environments
Make your transition to the cloud confidently and protect what matters most. Meet exacting compliance requirements with a solution that is transparent, strong, easy, and efficient.
-
How Public Sector Organizations Can Overcome Data and Audit Protection Challenges
Public sector organizations must protect critical data and meet compliance and cybersecurity requirements, while gaining security intelligence across physical, virtual, cloud and big data environments. Learn how Vormetric provides a single platform that can provide data security and operational efficiency in a variety of use cases.
-
Vormetric Data Security Enhances Security Intelligence
When the barbarians penetrate the perimeter, how do you protect your critical data? Learn why combining Vormetric Security Intelligence with your SIEM is the next step in protecting your enterprise. You can pinpoint unusual patterns that indicate malware, detect possible malware or malicious insiders, and more.
Free Research and Reports
Whitepapers
Upcoming Events
Dark Reading Digital Magazine
In This Issue
- The Future Of Web Authentication: Password technology is out of steam. We need safer ways to prove who's who online.
- Rethink ID Management: If the technology continues to improve, it might soon be OK for all of us to be one person on the Web.