Your search for disclosure returned 233 results.

The insider threat is the main security risk enterprises face -- insider incidents from using system administrator or privileged account access are responsible for nine out of 10 breaches in data security. When we think about IT saboteurs, most of us picture a professional cyber-criminal or hacker bent on stealing confidential information or wreaking havoc. In both cases, the perpetrator is an outside party who breaches the data network of a company, institution, or government entity with malicious intent. Nearly nine out of 10 corporate data breaches could have been prevented had reasonable security measures been in place, according to a report issued today by Verizon Business. Microsoft fixed six vulnerabilities, three of them rated critical, with four patches in its May Patch Tuesday round this week. All were file-format vulnerabilities impacting client-side Windows machines rather than servers. Industry experts have welcomed assurances from Microsoft that the firm has not provided law enforcement agencies with a 'back door' into its systems.. Researchers have discovered a rare bug in a Windows-based control software package used by as many as one-third of the world's industrial plants.
Employees remain the greatest risk to an organisation's data. IT threats are continuing to rise, although the number of disclosed vulnerabilities tailed off in the last six months of 2007, according to new research from Microsoft launched at today's Infosecurity Europe event. A new Hall of Fame, more than 300 vendors and expert advice on the burning issues of the day are certain to attract more visitors than ever. A day after Damballa, an internet security company that focuses on targeted threats, announced the discovery of a new BotArmy named Kraken, the company released a follow-up statement to defend its findings after a number of security professionals questioned the validity of the claims. Google is offering security professionals a look into its security systems.. The Voice over Internet Protocol (VoIP) products of Avaya, Cisco and Nortel are filled with more than 100 vulnerabilities, according to a report from VoIPshield Laboratories. The US Federal Trade Commission on Thursday announced a settlement with TJX over the discount retailer's massive breach of customer credit card records. Tumbleweed’s regional vice president Stree Naidu has praised Australian organisations for their efforts in aptly implementing solutions to prevent information and data breaches. In a move sure to fuel the debate over responsible disclosure, a pair of security researchers have posted public exploit code for a severe vulnerability affecting users of the Internet Explorer toolbar for business networking site LinkedIn. Apple has released its second update for Mac OS X Leopard, providing stability and performance updates and fixes for eight security flaws.. Apple on Wednesday released a new version of its QuickTime media player, patching a flaw in the application on both Windows and Mac OS X operating systems. A new study suggests that fears about security breaches are moving down IT managers' list of concerns.. Following the UK government’s decision to ban the removal of un-encrypted laptops from government buildings, Australia’s Privacy Commissioner Karen Curtis is urging organisations to conduct risk assessments to determine whether their stored data requires encryption security. Researchers at Fortinet have discovered what they believe to be the first malicious widget to appear on the popular social networking website Facebook.