Endpoint Security Topic Center

Endpoint security news, in-depth articles and more

Alleged tech support scammers settle FTC charges

Operators of two alleged tech support scams that charged consumers hundreds of dollars to supposedly fix their computers have settled charges from the U.S. Federal Trade Commission.
Read more...

Researchers find malware targeting online stock trading software

Security researchers from Russian cybercrime investigations company Groub-IB have recently identified a new piece of malware designed to steal login credentials from specialized software used to trade stocks and other securities online.

IRS going against privacy tide on warrantless email search

The Internal Revenue Service (IRS) has taken the position it does not need a search warrant to gather email in criminal investigations, despite opposition from lawmakers and privacy advocates and a ruling by a federal appellate court.

Researchers uncover vSkimmer malware targeting point-of-sale systems

A new piece of custom malware sold on the underground Internet market is being used to siphon payment card data from point-of-sale (POS) systems, according to security researchers from antivirus vendor McAfee.

Retailer faces uphill battle in $13M lawsuit against Visa, analyst says

Specialty retailer Genesco faces an uphill battle in its precedent-setting $13.3 million lawsuit against Visa USA Inc., a Garner analyst said.

Kaspersky Internet Security 2013 bug can freeze computers

Kaspersky Lab's Internet Security 2013 product contains a bug that can be exploited remotely, especially on local networks, to completely freeze the OS on computers running the software.

Following hack, Evernote speeds move to two-factor authentication

Evernote is speeding up its plans to offer two-factor authentication to users following a recent data breach that exposed user names, email addresses and encrypted passwords.

Many companies likely affected by iOS developer forum compromise

The administrators of a popular iOS developer Web forum called iPhoneDevSDK confirmed Wednesday that it had been compromised by hackers who used it to launch attacks against its users. Security experts believe the site served as a gateway for the recent attacks against Twitter, Facebook and Apple employees and that many other companies might be affected as well.

McAfee updates business security management tools

McAfee is enhancing its business security platform by adding near real-time querying capabilities to its ePolicy Orchestrator software and by integrating it with its security information and event management product to automatically initiate endpoint security policy changes.

Wall Street Journal says it too was hit by Chinese hackers

The Wall Street Journal said Thursday it had been targeted by hackers trying to monitor the newspaper's coverage of China, less than a day after a similar revelation from its competitor The New York Times.

Passwords are the weak link in IT security

Three decades into the digital revolution, passwords are still complicated, ineffective and a drain on IT's resources. What gives?

ATM fraud refunds may not come quickly, if at all

In early April, A$800 vanished from my account, the result of a late-night withdrawal from a cash machine in a Sydney neighborhood I'd never been to before.

Is Your Cloud Provider Exposing Remnants of Your Data?

Security researchers report that incorrectly configured hypervisors can lead to a separation of data issue in multi-tenant environments that can expose data remnants. However, you can prevent hosting your data on 'dirty disks.'

Red Sky Alliance: An experiment in information sharing

Chris Camacho, information security officer at The World Bank Group in Washington D.C., explains how the Red Sky alliance helps member organizations safely share information.

Embedded data, not breasts, brought down hacker

FBI tracks down Higinio Ochoa using geo-tagged photos

Anonymizer Universal Shields You From Content-Targeting

When you browse the Web, you are constantly being tracked. It's not personal: It's marketing. Website owners and ad networks want to learn as much as they can about you, so they can target their content and ads effectively. After all, there's not much use in showing ads for anti-aging products to a sixteen-year-old. That said, not all users appreciate being tracked so meticulously, and this is where Anonymizer Universal and other VPN applications come in.

Make Web Apps More Manageable With Minimalist for Everything

Google Reader and Gmail are two of the most customizable Web apps available today. Need a different inbox layout? Sure thing. Want to change the colors or visual density? No problem. Still, some interface elements, like the Google Bar at the top of the window, will never go away, no matter what you do. If you wish they did, try free Chrome extension Minimalist for Everything.

Private WiFi Protects Sensitive Data--for a Price

Private WiFi is a $10-per-month ($85 per year) service that secures your data from Wi-Fi hacking by placing it within a VPN (Virtual Private Network). It does this with client software (PC and Mac) that connects to the company's own secure servers.

A clear-eyed look at APT

Setting aside the hype, advanced persistent threats do present CISOs with a few to-dos

How security can add value to DevOps

Gene Kim, award-winning entrepreneur, researcher and founder of security firm Tripwire, walks us through his vision.