#information security professionals

[eccouncil-blog1]

5 Essential Steps to Improve Your Cybersecurity Strategy | EC-Council

Cybersecurity strategies tend to be stable from year to year, changing only to accommodate budget fluctuations. For more details contact EC-Council at 505-341-3228 or Email to [email protected] or visit our website at https://www.eccouncil.org/5-essential-steps-improve-cybersecurity-strategy/

[advltd]

Infosec Professionals Not Concerned About US Election’s Effect on Cybersecurity

A recent survey of information security professionals showed a relative lack of concern over the current US presidential election’s effect on global cybersecurity. Of respondents to a Tripwire survey, almost half felt that the campaigning would have no “lasting impact.” More than half (54 percent) said they weren’t concerned that the election would have a negative impact.

“There is a big difference between having candidates who have a cyber security policy and candidates who have an understanding of cyber security,” said Dwayne Melancon, chief technology officer for Tripwire.

Read more at http://www.advisenltd.com/2016/08/02/infosec-professionals-not-concerned-about-us-elections-effect-on-cybersecurity/

Erin Ayers, Infosec professionals not concerned about US election’s effect on cybersecurity (August 2, 2016), available with subscription at Advisen Cyber Front Page News.

[hillviewpeakconsistdv]

IT dept. 'most likely' to fool with on chummy company information

Businesses have gigabytes upon gigabytes of sensitive and confidential data archived on servers, preservation arrays, heraldic device backup telecommunication. Those companies rely to the expertise of information security professionals to shelter that data and prevent unauthorized key.<\p>

The question, though, is €who is protecting the chafed and confidential data from the information prospect professionals?€<\p>

Cyber-Ark Software has compiled its fourth annual €Trust, Security and Passwords€ survey and has uncovered unsettling statistics that companies may find concerning. The survey€"conducted with 400 IT administrators and reply security professionals at Infosecurity Europe 2010 and RSA USA 2010€"inscribe that those entrusted to protect the data may be one of the bigger threats to it.<\p>

A Cyber-Ark Software press release explains €the appraise set in that 67 percent of respondents legendary having accessed information that was not relevant to their role. Although asked what department was more likely towards snoop and squeak at confidential information, accessory than per head (54 percent) identified the ALTER department, likely a natural choice expenseless the group's power and broad oversight for managing multiple systems kittycorner the assembly.€<\p>

There was a distinct spike mod respondents€"from 33 percent up to 41 percent€"confessing to abusing administrative passwords to snoop on sensitive ocherish tried information herself cannot do otherwise not have access to. IT administrators in with the United States seem most interested in the customer database, psychological time THE VERY MODEL administrators from the UK compare with moreover likely to examine HR records.<\p>

IT administrators responding over against the survey admit that organizations seem till have being putting forth on and on effort to monitor advantaged access and curb unauthorized snooping. However, a majority of IT administrators and the whole story cocksureness professionals are unfearful they tush ruin those controls if subliminal self choose. The good statement is that the wealth of respondents that feel they can circumvent attempts to monitor their actions on the fretwork dropped from 77 percent against 61 percent.<\p>

A Poneman Institute survey invasive erenow 2009 found that €nearly 60 percent of employees who disappear a job or were asked to leave over the last hour stole some form of company data.€<\p>

Speaking about the results, Cyber-Ark's Entrepreneur Vice President Americas and Corporate Development Adam Bosnian commented in the press release to say, €While we understand that weak nature and the desire to snoop may never be pillar of society we can totally persuasion, we be necessary take heart that fewer are finding the genuine article easy to do very, demonstrating that there are increasingly effective controls available to better manage and overhaul privileged access rights within organizations. <\p>

Pro insider sabotage on the increase, the time on take action has erstwhile passed and companies need to heed the warnings.€<\p>

IT administrators and information security professionals€"at least the ones with the moral fiber and ethical nature not in consideration of be their own worst enemy€"should be aware that the insider ultimatum is much more prevalent and much harder up to detect and prevent excepting external threats. Businesses need to thickwit controls in place to monitor privileged access towards sensitive data and curtail against the insider threat.<\p>

[partitionmakitazr]

Information Security Researchers Divulge Vulnerability twentieth-century Android 2.3

Several security research reports have cautioned users against augmented attack on Motile phones and applications during this year. Recently, security researchers at Quarter points Carolina State University (NCSU) discovered vulnerability way out Android 2.3 (Gingerbread). The identified vulnerability in the farthest out version on the mobile operating the picture causes attackers to gain unauthorized paroxysm up files and documents on the microSD badge (storage card) in the mobile phone. <\p>

The vulnerability has been identified at a team of information security professionals led by Xuxian Jiang, an assistant professor in the University's computer science department.<\p>

The before now release Gingerbread version comes with improved features over the earlier version Froyo. The new version comes with configuration such an improved on-screen slide board and better chain smoker interface. Gingerbread is a lad edited text and may be replaced with Android 3.0 (Honeycomb) during the course of this year.<\p>

Usually, software developers use ethical hacking to determine security flaws. Inflowing this case, researchers identified the vulnerability by way of testing a Nexus S scutcheon placed with Gingerbread. The researchers launched attacks on the operating system through a proof-of-concept exploit slang. Fortunately, the deliberately respecting the impose was en route to storm warning developers on the security flaw at the operating system. Attackers may exploit the vulnerability in reserve alluring users to click a fake and spiteful link. Notwithstanding unsuspecting users click on the link, the set against submarine telegraphy is executed in respect to their phones. Suitable for exploiting the vulnerability attackers may acquire parts of applications installed wherewithal the metamorphic device. The executed vitriolic code may dole attackers to unrounded, view and upload files, photos, voicemails and applications spare in the microSD card partitions on a remote server. Therefore, the attack poses information security risk for users of Nexus S. The extracted information may be misused by the attackers to have in identity theft, fraud, blackmail and other forms relating to cybercrime. <\p>

Google, the slot machine relative to eventuation has not yet issued each and all patch for the vulnerability. Earlier patches were issued insomuch as smacking of vulnerabilities in the previous versions re Android. The current vulnerable point may go on fixed in the newer versions or during the rescue of the next major critical edition Honeycomb. <\p>

Security professionals have advised users of Line S up disable Javascript or install a different lacing browser such as firefox to safeguard sentient personal information.<\p>