First-ever European Maturity Model Details Success of SWIFT, Nokia and others

London - November 12th, 2009 - Fortify Software, the market leader in Software Security Assurance solutions, and Cigital, the largest software security consulting firm in the world, announced today the release of the Building Security In Maturity Model for Europe or “BSIMM Europe,” an application of the industry’s first-ever set of benchmarks for developing and growing an enterprise-wide software security program to the European market. BSIMM Europe illuminates the software security practices of some of the most advanced organizations in Europe, including Nokia, SWIFT, Standard Life, Telecom Italia, and Thomson Reuters, and four companies that chose to remain anonymous.

Read more: New Study Provides Real-World Data on Leading Software Security Initiatives in Europe

Cyber-Ark Leads the Charge in Unifying SAPM and SUPM Markets; Provides Enterprises with a Single Solution that Delivers Centralized Audit and Policy Management for All Privileged Accounts

 London– November 9, 2009 – When it comes to managing privileged identities, most enterprises have been forced to invest in separate solutions to manage the lifecycle and access-control policies across all shared and superuser accounts, resulting in cumbersome controls, inconsistent policies and audit gaps.  With the newest version of its Privileged Identity Management Suite, Cyber-Ark® Software expands into the superuser access control market and becomes the first vendor to provide a unified, policy-driven approach for shared-account/software-account password management (SAPM) and superuser privilege management (SUPM).

Read more: Cyber-Ark Expands Into Superuser Access Control Market and Redefines Privileged Identity...

9th November 2009 – The BBC reported today that the Durham police website had been hacked by a computer hacker protesting against the terror deaths in Pakistan, forcing the website to be closed.

According to Imperva, the data security specialist, who is constantly monitoring hacker sites and activities, the police website is vulnerable to SQL injection attacks.

 

“Our research shows that the website does have vulnerabilities which could lead to the recent attack. Our researchers have seen that for a while hackers have been discussing the weak points of the Durham police website including discussions of being able to extract usernames and passwords that are used for the administration of the site." said Amichai Shulman, Imperva's CTO.

Read more: Durham police website vulnerabilities shared by hackers

A recent announcement by ICANN regarding international domain names poses some security risks, according to ISACA, a global association of IT security, audit and governance professionals.

ICANN (Internet Corporation for Assigned Names and Numbers) recently announced that International Domain Names (IDNs) will support non-Latin characters, including Mandarin, Arabic, Hindu and Cyrillic. ICANN is also discussing expanding the number of generic top-level domains (gTLDs), such as .com and .org, from its current list of 21 to include almost any word, in almost any language

 

“While we understand the interest in expanding the characters offered in other languages, we are concerned that an increase in web site characters could lead to greater security risks and consumer fraud,” said Peter Wood, member of ISACA’s Conference Committee and founder of First Base Technologies.

Read more: ISACA Warns Increase in Web Site Characters Could Lead to More Phishing Attacks

Woking, Surrey: 4th November, 2009 - Farmers’ Weekly has reported[1] that two back up tapes, containing thousands of farmers’ bank details, have been lost by the Rural Payments Agency (RPA). Concerned whistleblowers recently leaked the story to the publication.

The Department of Environment Food and Rural Affairs (DEFRA) knew about the loss, back in May, says Farmers Weekly, and the RPA knew in September, but nothing was done to advise farmers of the risk they faced.

Quite who is responsible and how the tapes were lost is still being hotly debated with a lot of buck passing going on. According to one Farmers’ Weekly source, the tapes weren’t encrypted, as they should have been, increasing the risk.

Read more: Latest Data Leakage Scandal Highlights Government’s Use Of Outmoded Storage Technology.