Software Development Below the Security Poverty Line

A product manager approaches the security architect. “Please,” the product manager says, “I only have one or two more releases of this product before the program is cancelled. Won’t you please sign off on shipping without your security requirements so that we can afford to implement a few more features?”
read more

Continue reading

Unpatched Flaws Plague Moxa Connectivity Products

Several serious vulnerabilities affecting Moxa’s MiiNePort embedded serial device servers have been disclosed by ICS-CERT and the researcher who discovered the issues.
MiiNePort are embedded serial-to-Ethernet device server modules mainly deployed in the United States and Europe in the commercial facilities, critical manufacturing, energy and transportation sectors.
read more

Continue reading

Microsoft May Ban Your Favorite Password

Microsoft Banning Commonly Used Passwords and Adding Account Lockout Feature
Weak and commonly-used passwords are one of the main reasons online accounts can be easily compromised, but Microsoft is taking a step to better protect users by banning the use of such passwords across its services.
read more

Continue reading

Authorities Disrupt ATM Skimming Operation in France

An operation conducted on May 18 by the French Gendarmerie of Pau, in cooperation with the Investigative Unit of the Italian State Police of Imperia and Europol, resulted in multiple house searches in France and Italy, as well as in the final arrest of nine individuals in France, Europol said in a statement
read more

Continue reading

Asia Hotbed of IT Piracy Despite Economic Growth: Report

Unlicensed Software Use Still High Globally Despite Costly Cybersecurity Threats
More than 60 percent of all computer software installed in the Asia-Pacific in 2015 was unlicensed, the worst of any region, despite growing economies and anti-piracy efforts, an industry watchdog said Wednesday.
read more

Continue reading

Agari Raises $22 Million to Expand Email Protection Platform

Agari, a provider security solutions that help detect email-based cyberattacks, today announced that it has raised $22 million in a Series D funding round, bringing the total raised by the company to $44.7 million. The company previously raised $15 million in a Series C funding round back in September 2014.
read more

Continue reading