The Flashback Trojan that infected more than 600,000 Apple computers at its height has been largely contained, according to a new report in TechNews World. But cybersecurity experts warned that new variants still pose a threat.
GSA, NIST to name the first batch of outside organizations who will test and validate commercial cloud products against baseline security standards in the FedRAMP cloud security program in May. The Joint Authorization Board also will release guidance to industry on how to implement the security requirements in the coming months. FedRAMP still is months from approving its first set of vendors.
The Duqu virus, widely known as a "twin" to the Stuxnet worm that targeted Iran's nuclear infrastructure, is evolving yet again. Software security firm Symantec said the program has a new variant altered "just enough...to evade some security product detections."
Agencies may be going about FISMA compliance the wrong way, says Marcus Ranum, chief security officer of Tenable Network Security.
The Defense Finance and Accounting Service said the emails appear to come from its office. The "spoofs" said that people who are receiving disability compensation from Veterans Affairs may be able to obtain more money from the Internal Revenue Service.
Cyber criminals have targeted a cloud-based payroll service in Canada in an effort to steal authentication information, according to a new report in PC World.
A British blogger has found a security hole in Facebook's mobile apps for Android and iPhone, which can be used to steal personal information.
A national cyber defense championship is ramping up in Texas. At stake are not only bragging rights, but lucrative job offers from private companies, government agencies and the Defense Department.
The Army and DISA will release a broad agency announcement this summer seeking third party software to secure smartphones and tablet computers. The Marine Corps is looking at host of different possibilities to secure mobile devices, including a process to verify the software code in apps.
The Hacker group Anonymous appears to be planning attacks on companies and elected officials that support certain cybersecurity legislation. So far, hackers have claimed credit for taking down the websites of Boeing, TechAmerica and USTelecom over the past few days.
The January attack forced the Economic Development Administration to go offline. It had to build a new operating system from scratch.
National Institute of Standards and Technology wants comments about revisions to FIPS 186-3. NIST said the proposed revision includes clarifications, corrections and revisions
Information sharing is critical but insufficient, White House cyber chief says. Howard Schmidt said the federal government's responsibility is broader than its own systems and that is why any cyber bill needs stronger oversight of critical networks.
Reps. Mike Rogers (R-Mich.) and Dutch Ruppersberger (D-Md.) introduced legislation to make sharing of classified cyber threat information easier between the government and the private sector. The bill builds on DoD's Defense Industrial Base pilot to share data about vulnerabilities. DoD plans to expand the DIB pilot to more than 200 companies in the coming year.
The National Institute of Standards and Technology has asked for comments about its proposed revisions to the Digital Signatures Standard.