Blog feeds may carry security risk
Reading blogs via popular RSS or Atom feeds may expose computer users to hacker attacks, a security expert warns. Attackers could insert malicious JavaScript in content that is transferred to subscribers of data feeds that use the popular RSS (Really Simp...
Security policies proliferate in wake of data thefts
As reports of data being compromised in agencies' information technology systems mount, policy-makers are responding with efforts to clamp down. Recent cases involving the Department of Veterans Affairs, the Energy Department and the Navy that have exposed...
New Cisco Suite Takes On Complicated Regulatory Issues
Cisco introduced today a configuration-management suite designed to help companies understand the state of each device on their networks and map them to regulatory requirements. The suite, called Proactive Automation of Change Execution, or PACE, include...
Compliance demands a technology toolbox
When compliance auditors dig deep, a company"s technology infrastructure, processes and policies need to stand up to intense scrutiny. Companies are looking to technology to prove that they are compliant with Sarbanes-Oxley (SOX), Europe"s Basel II, HIPA...
Security breach raises new doubts on CIS capability
An employee of U.S. Citizenship and Immigration Services distributed the personal and private employment information of thousands of her fellow workers last week, raising concerns that those responsible for granting visas and other immigration benefits cou...
Sentry Insurance says customer data stolen
Personal information on 72 worker"s compensation claimants was stolen from Sentry Insurance and later sold over the Internet, the company said. The data sold included names and Social Security numbers but not medical records, Sentry said. Data on an addit...
Power Industry Gets Security Standard
Move over HIPAA, SOX, and PCI. There"s a new security compliance standard in town. After nearly three years of consideration, the North American Electric Reliability Council (NERC) has finalized its Critical Infrastructure Protection (CIP) specifications,...