The Security Shelf

Look beyond BYOD

Whether officially permitted or not, employees are using personally-owned smart phones, tablets, and PCs for work. A study by Gartner last year found that 57% ...

Rapid Cybersecurity Risk Assessments

Businesses and governments alike are struggling to effectively protect information systems from cyber-attack. The theory appears sound: We conduct risks assessment, identify areas of risk ...

Apple releases iOS 7.1 to address multiple security issues

On Monday Apple released iOS 7.1 to address a number of security issues. The update is now available through iTunes and Software Update on iOS devices. ...

C-13: Who’s the bully?

Bill C-13 is being promoted by the Conservatives as addressing cyber-bulling, but it is much more about the Harper government bullying Canadians into giving up ...

Adobe Releases Security Update for Adobe Shockwave Player

Adobe has released a security update to address a vulnerability in Adobe Shockwave Player 12.0.7.148 and earlier versions for Windows and Macintosh operating systems.

All featured articles »

LogMeIn’s Join.me Online Meeting App Gets New Enterprise Version

The Join.me enterprise version gets deeper management, security, single sign-on features and more, which are sought by business IT departments for larger teams.

In Cisco probe, misuse or compromise spotted on all firms’ networks

Cisco analyzed the business networks of 30 multinational companies last year, and revealed the findings in its 2014 Annual Security Report.

Fareit trojan observed spreading Necurs, Zbot and CryptoLocker

The Necurs and Zbot trojans, as well as CryptoLocker ransomware, has been observed by researchers as being spread through another trojan, known as Fareit.

Apple users were left at risk by 3-week delay between OS X and iOS patches

Apple exposed iOS users to security threats by taking three weeks longer to patch the same vulnerabilities in the mobile OS that it previously fixed ...

Mozilla offers up $10K for bugs found in new certificate verification library

Mozilla will offer bug bounty hunters $10,000 if they dig up critical vulnerabilities in a new certificate verification library, which is on pace to be ...

DDoS attack almost crashes children’s hospital website

Officials haven’t confirmed a DDoS scheme, but noted the attackers hit the hospital’s website with large attacks designed to overwhelm it with traffic.

Google Asks Developers to Tighten User Log-In Security Measures

Google application developers are being urged to upgrade all of their applications to the OAuth 2.0 authorization protocol for Google APIs so that users are ...

Post Heartbleed, tech giants join initiative to bolster open source

The newly formed Core Infrastructure Initiative, created to boost under-funded open source projects, will tackle OpenSSL first.

Debunking Nine Myths About New-Gen Email Encryption

Misperceptions and myths still prevent many companies from deploying encryption. With new-gen encryption, keeping sensitive data protected isn’t hard.

No encryption means easy compromise of Viber location data, communications

Cross-platform communications tool Viber does not utilize encryption when sending, receiving or storing location data and communications, making the information easy to compromise.

HMRC offers shaky explanation on plans to sell taxpayer data

The UK revenue agency is considering selling anonymized taxpayer data to third parties.

Microsoft Surface Mini seems likely to ship soon

Microsoft may be prepping to ship a mini version of its Surface tablets within a month, based on an Amazon.com listing for a case custom ...

Recent Features