Security Experts:
Steve Ragan
Steve Ragan is a security reporter and contributor for SecurityWeek. Prior to joining the journalism world in 2005, he spent 15 years as a freelance IT contractor focused on endpoint security and security training.
Recent articles by Steve Ragan
-
ICS-CERT has issued an advisory after a researcher exposed four separate flaws within Pro-face Pro-server, a popular data management server that offers real-time reporting of automated manufacturing and production environments.
-
Speaking to 1,000 IT professionals, from a wide range of industries (banking, retail, telecom, etc.), NeuStar asked about their perceptions on the overall business impact of a DDoS attack.
-
Wikimedia, the foundation responsible for information hub Wikipedia, is warning users that if they see ads on the encyclopedia’s webpage, their system might be infected with malware.
-
Stephen Fletcher, the executive director of Utah’s Dept. of Technology Services (DTS), has resigned following the aftermath of a massive data breach earlier this year that exposed nearly one million people
-
The attackers hijacked several websites related to matters of government and foreign policy, and used them to deliver malicious payloads to visitors by leveraging unpatched software flaws.
-
As seen in other layered approaches from McAfee, the solution or “joint implementation” that has been developed to help protect the energy infrastructure relies heavily on their ePolicy Orchestrator. However, this time Intel is kicking-in some additional juice with its vPro hardware-based security technology and AMT.
-
Researchers at Trusteer have discovered a variant of Zeus with a P2P component that is targeting high profile sites such as Facebook, Google, Hotmail, and Yahoo in order to compromise debit and credit card data.
-
Jeremy Hammond, former LulzSec member and alleged mastermind of the Stratfor hack, pled not guilty on Monday during a brief hearing at the US District Court in Manhattan, the Associated Press reported on Monday.
-
A start-up in Russia, backed by Microsoft, says they have developed technology that can stop BitTorrent-based filesharing. The Pirate Pay came into existence due to the growth of copyright infringement in Russia, and the mounting international pressure to stop it.
-
ZTE, a handset manufacturer in China, has shipped Android smartphones to the U.S. with a fully enabled backdoor. The news of the backdoor came by way of an anonymous post to Pastebin, but was later confirmed by other researchers.
-
Earlier this week, Adobe posted a security bulletin for Photoshop 12 (Creative Suite 5), detailing vulnerabilities that impact both the Windows and Mac versions of the imaging software. But in order to address the security flaw, users will need to upgrade and pay for a new version of the software.
-
The U.S. Department of Defense, working alongside the U.S. Department of Homeland Security, announced on Friday that they would expand the availability of the cybersecurity information assurance program launched last year.
-
After suffering a massive amount of embarrassment over the leak of classified and sensitive diplomatic cables - allegedly at the hands of an insider - the Army wants to use keylogging software with additional abilities, to prevent another Cablegate scale data breach.
-
They call it OpDefiance (or Operation Defiance), and on Wednesday Anonymous pushed forward in their continual acts of defiance by targeting the website of Russia’s on-again-off-again president, Vladimr Putin.
-
Here at SecurityWeek, we ran a test to see if we could see this bot in action. After mentioning Pinterest in a message, we were spammed with a link to a survey offering a gift card. To collect, we needed to complete several forms and refer people to do the same.
-
Washington State Attorney General Rob McKenna sued Adscend earlier this year, after a rash of scams on Facebook led to users being tricked into sharing personal information and signing up for subscription services.
-
MySpace settles with FTC after failing to live up to privacy expectations On Tuesday, the Federal Trade Commission (FTC) announced that MySpace has agreed to settle charges that the social networking portal misrepresented its privacy claims to users.
-
Plaxo has disabled its API and suspended some services after attackers used them as a proxy to target an unknown number of Google accounts.
-
Apple has released an update to its iOS platform, which addresses three vulnerabilities that could be used by attackers to execute code, crash applications, or trigger XSS (Cross-Site Scripting) attacks
-
In a letter to Senator John McCain, General Keith Alexander, the director of the NSA and current commander of the U.S. Cyber Command, says that the U.S. should implement policy that would require hardened network defenses.
-
The Blackhole exploit kit has moved its ransom-based payloads forward from child porn and terrorism to copyright violations. The new theme from the crime kit is professionally developed and is mostly targeting users in Europe.
-
On Tuesday, the PHP Group plans to release new versions of PHP in order to address the problems with a previous patch, which was intended to close a security problem. As SecurityWeek reported on Friday, the first patch released by PHP was easily bypassed.
-
Version 11.3 of Adobe’s Flash Player, due in June, will provide the same silent update feature currently available to Windows users to those running OS X. In addition, Adobe will also offer a new security enhancement to Firefox called protected mode.
-
According to reports, natural gas companies were requested in an alert not to take action to remove the cyber spies if discovered on their networks.
-
Aside from a few announcements since that time, Intel had not fully explained how McAfee would fit into the bigger picture. That changed on Friday, when Intel announced its cloud-based security initiatives, which rely heavily on McAfee.
Subscribe to SecurityWeek
- ICS-CERT Issues Warning After Full Disclosure of SCADA Flaws
- PCI Council Releases Mobile Payment Acceptance Guidance
- Report Analyzes Concerns, Business Impact of DDoS Attacks
- Black Hole Exploit - A Business Savvy Cyber Gang Driving a Massive Wave of Fraud
- Users Warned of Malware After Ads Reported on Wikipedia Site
- Utah's IT Boss Resigns After Massive Data Breach and Policy Failure
- Espionage Campaign Targets Foreign Policy Domains
- Apple Mac OS X Leopard Updates Target Flashback Trojan, Old Flash Player Versions
- California Woman Gets 5 Years in Prison for Role in Phishing Scheme
- Intel Boosts Security in Latest Intel Core vPro Processor
Copyright © 2012 Wired Business Media. All Rights Reserved. Privacy Policy | Terms of Use