June

The latest in information security (in English and Dutch)

2014-06-24

• Privacy and Information Security Law Blog: Recent developments concerning cybersecurity disclosure for public companies
• Dennis Shwarz (The Arbor Ntworks IT Security Blog): The Citadel and Gameover campaigns of 5CB682C10440B2EBAF9F28C1FE438468 | Via

2014-06-23

• Brian Krebs (Krebs on Security): Card wash - Card breaches at car washes

2014-06-21

• Rob Graham (Errata Security): 300k vulnerable to Heartbleed two months later

2014-06-18

• Robert Graham (Errata Security): Products endorsed by cybersec experts

Earlier / undated

• Nicolas Christin, Serge Egelman, Timothy Vidas, and Jens Grossklags: It's all about the Benjamins - An empirical study on incentivizing users to ignore security advice [PDF] | Via
• Joanna Lyn Grama (EDUCAUSE): Just In Time research - Data breaches in higher education [PDF linked from this page] | Via
• IBM Global Technology Services - Managed Security Services: IBM Security services 2014 cyber security intelligence index [PDF] | Via
• Rob Jenkins, Jane L. McLachlan and Karen Renaud: Facelock - familiarity-based graphical authentication | Via
• Nicolas Viennot, Edward Garcia and Jason Nieh: A measurement study of Google Play [PDF] | Via

[Permalink]

The latest in information security (in English and Dutch)

2014-06-09

• Antonin Hyza (Avast! blog): Are hackers' passwords stronger than regular passwords? | Via
• Brian Krebs (Krebs on Security): Backstage with the Gameover Botnet hijackers

2014-06-06

• Jaap-Henk Hoepman: Google gaat PGP voor Gmail ondersteunen. Wat betekent dit precies?

2014-06-05

• Dan Goodin (Ars Technica): They're ba-ack: Browser-sniffing ghosts return to haunt Chrome, IE, Firefox

Earlier / undated

• Risk based Security / Open Security Foundation: Data breach quick view - Data breach trends in the first quarter of 2014 [PDF] | Via
• Wenley Tong, Sebastian Gold, Samuel Gichohi, Mihai Roman, and Jonathan Frankle: Why King George III can encrypt [PDF] | Related blog post
• Hao Zhang, Danfeng (Daphne) Yao, and Naren Ramakrishnan: Detection of stealthy malware activities with traffic causality and scalable triggering relation discovery [PDF] | Via

[Permalink]

The latest in information security (in English and Dutch)

2014-06-05

• Rijksoverheid.nl: Plastkerk reikt diploma's fraudebestrijding uit | Via

2014-06-04

• Bruce Schneier (Schneier on Security): The human side of Heartbleed

2014-06-03

• Mark Weston (SCL): Pass the word - What recourse do consumers have when their passwords are compromised?

2014-05-27

• T.C. Hemel and J.A. de Vries (Secure Software Foundation): Framework secure software [PDF linked from this Dutch-language page, registration not required] | Full text, PDF | Via

Earlier / undated

• Dashlane: The Dashlane security roundup - Q2 2014 | Via
• United States Government Accountability Office: Agencies need to improve cyber incident response practices [PDF] | Via
• Google: Email encryption in transit | Via

[Permalink]

The latest in information security (in English and Dutch)

2014-05-26

• Dan Goodin (Ars Technica): Unsafe cookies leave WordPress accounts open to hijacking, 2-factor bypass | Via
• Jeroen Kraan (NuTech): Wat is PGP en waarom zou je het moeten gebruiken? | Via

2014-05-22

• Arnoud Engelfriet (Ius Mentis): Mag de politie een Blackshades-command en control server hacken?
• Bruce Schneier (Schneier on Security): Disclosing vs. hoarding vulnerabilities

2014-05-21

• Brian Krebs (Krebs on Security): Why you should ditch Adobe Shockwave

Earlier / undated

• Raphael Spreitzer: PIN skimming - exploiting the ambient-light sensor in mobile devices [PDF] | Via

[Permalink]