Tennessee firm blames bank for $193K cybertheft
A lawsuit filed in Tennessee earlier this month has resurfaced questions about a bank's responsibility in protecting customers against cyberheists.
Stories by Jaikumar Vijayan
Senator wants curbs placed on fitness data use
Sen. Charles Schumer (D-N.Y.) wants the U.S. Federal Trade Commission to investigate the data gathering and sharing practices of makers of personal fitness devices and applications.
PCI Security Council moves to boost service providers' credit card security
The PCI Security Standards Council has updated its guidance to help merchants better determine whether third party service providers have implemented security measures to protect credit and debit cardholder data.
Russian credential theft shows why the password is dead
News that Russian hackers amassed log-in credentials belonging to more than 1.2 billion Internet users hammers home why companies that have not implemented strong authentication measures really need to get moving on it.
Cybersecurity should be professionalized
The time is ripe for professionalizing cybersecurity, according to Salve Regina University's Pell Center for International Relations and Public Policy.
Retail industry rallies behind open standard for tokenization
A coalition of retail industry trade groups this week called for the creation of an open tokenization standard for protecting credit and debit card data from theft and misuse.
Microsoft ordered to turn over customer data stored in the cloud
Microsoft has been ordered to comply with a U.S. government demand for a customer's emails stored on a company server in Dublin, Ireland.
Attackers exploit remote access tools to compromise retail systems
Malicious hackers are using remote access tools to break into retail point-of-sale systems and plant malware on them, the Department of Homeland Security warned.
CISOs still struggle for respect from peers
Chief information security officers (CISOs) continue to have a hard time gaining the respect of other C-suite executives despite the heightened focus overall on information security.
There's still a security disconnect on BYOD
Corporate employees are taking a surprisingly lax approach towards security issues raised by the business use of personally owned mobile devices.
New docs show DHS was more worried about critical infrastructure flaw in '07 than it let on
The Department of Homeland Security mistakenly released details on an experiment in which a 27-ton generator was destroyed via a cyberattack.
NSA defends collecting data from U.S. residents not suspected of terrorist activities
The National Security Agency Monday defended its data collection practices amid revelations that almost 90% of the data it sweeps up involves ordinary Internet users not suspected of crimes.
Hackers hit more businesses through remote access accounts
Hackers recently broke into payment systems at several northwestern U.S. restaurants and food service firms via a remote access account belonging to one of their vendors, another example of the need for companies to monitor third-party access to their networks.
Critics blast Microsoft's takedown of No-IP domains
Microsoft's tactics in using a court order to seize nearly two-dozen No-IP.com domains it said were used to distribute Windows malware tools were called ham-handed by several critics.
Groups fear bill would allow free flow of data between private sector and NSA
A draft U.S. Senate bill aimed at making it easier for organizations to share cyber threat information poses serious threats to personal privacy, several rights groups said in a letter to Congress on Thursday.