Editor's News

Businesses are becoming more reliant on free anti-virus software, as the technology improves at consumer level to match that of the paid for equivalent.   Speaking to IT Security Guru, Stuart Okin, director of EMEA at CIPHER Security said that one of the key trends that he sees is a move from using enterprise-edition anti-virus to free software, as investment is made in incident response software instead.   He said: “With file integrity monitoring, that...

Dr Bob Nowill has been named as the new chairman of the Cyber Security Challenge UK.   Replacing the retiring Judy Baker, who launched the challenge in 2010 and oversaw five winners, Nowill will take on the position from 1st April. Formerly a director of Cyber for BT and director of technology and engineering for GCHQ, he has been a board member of the Challenge and has been involved with the growth of the organisation...

Thousands of British Airways frequent flyer accounts were accessed after hackers used information collected from a third party to try to gain access to some accounts.   In a statement, BA said that the access was “login information relating to a different online service which you may have also used to access your Executive Club account”.   It said: “We would like to reassure you that, although it does appear that the login attempt was...

Gaming giants Sony and Microsoft may consider working together to combat DDoS attacks.   In an interview, Phil Spencer, the head of Microsoft, revealed that he doesn’t consider the PlayStation Network going down to be a positive event, and said that “all it does is put the fear and distrust from any gamer that’s out there”.   He said: “So I look at all of us together as this is our collective opportunity to share...

The RC4 protocol remains a troublesome part of the SSL, and weaknesses allow for a new Man-in-the-Middle attack vector. According to the new Hacker Intelligence Initiative Report from Imperva, titled “Attacking SSL when using RC4”, an attack which targets the very basic encryption which is used by SSL/TLS, as well as independently of SSL/TLS, can break supposedly sensitive communications. Around 30 per cent of SSL connections use RC4, despite the cipher being designed more than...

The Reform Government Surveillance (RGS) has issued a public letter urging Congress to reform the United States bulk collection practise. In an open letter, organised by the Open Technology Institute, and signed by the American Civil Liberties Union, EFF, Mozilla, Human Rights Watch and Wikimedia among others, it calls to reform section 215 of the USA Patriot Act, which currently serves as the legal basis for the National Security Agency’s bulk collection of telephone metadata and...

Threat intelligence is rapidly becoming an ever-higher business priority with a general awareness of the need to ‘do’ threat intelligence, but vendors are falling over themselves to offer a confusingly diverse array of threat intelligence products.   According to MWR senior security researcher Dr David Chismon, there is a risk that in the hurry to keep up with the threat intelligence trend, organisations will end up paying large amounts of money for products that are...

The Government needs to put in place mechanisms, people, education, skills, thinking and policies which take into account both the opportunities and the vulnerabilities which cyber presents.   According to a report from the House of Commons Defence Committee, titled “Re-thinking defence to meet new threats”, it is unclear as to how work on cyber warfare has developed in the Armed Forces. “The Government should tell us when it will finalise its doctrine and guidance...

GCHQ has launched a fresh pilot sponsorship scheme aimed at identifying individuals with exceptional aptitude to become the UK's next generation of cyber security experts. The scheme, named “Cyber First” will draw on talent from a broad range of backgrounds to meet the UK’s future national security needs, both in Government or for companies involved in national security. Announced by Francis Maude, Minister for the Cabinet Office with responsibility for Cyber Security, it will identify those...

Gaming video platform and community Twitch has reported unauthorised access to some user's account information. In a notice, it said that it has expired passwords and stream keys, and have disconnected accounts from Twitter and YouTube. “As a result, you will be prompted to create a new password the next time you attempt to log into your Twitch account,” it said. “We also recommend that you change your password at any website where you use...