Tufin:  compliance does not guarantee security

News reports that some of the firms who have experienced data breaches in recent months were PCI-compliant highlights the fact that - even if a company has passed must on the regulatory front - this does not guarantee the integrity of their IT security systems, says Tufin Technologies, the security lifecycle management specialist.

"Complacency is the IT manager's worst enemy, especially when it comes to IT security," said Reuven Harrison, Tufin's chief technology officer.

"This fact was brought home quite clearly at last week's Black Hat security briefings in Las Vegas, at which researchers revealed company after company - and technology upon technology - whose IT security could be compromised," he added.

Entrust IdentityGuard Soft Tokens Able to be Delivered to Mobile Devices for Out-of-Band Authentication on 775 Networks in 220 Countries

Redwood City, CA — August 4, 2009 — One of the most diverse authentication platforms on the market for addressing online identity attacks is now that much more versatile. Entrust, Inc., in a relationship with Clickatell, enterprise global mobile messaging solutions leader, has expanded its ability to provide one-time-passcode (OTP) delivery to mobile devices via SMS. Often known as mobile soft tokens, this partnership expands the options available to customers using the Entrust IdentityGuard versatile authentication platform across multiple channels.

“Working with Entrust, we give customers a powerful mobile choice in how they deploy strong authentication to protect against online attacks,” said Clickatell CEO Pieter de Villiers.

Weak cloud password security highlights strength of local storage

Reports that researchers at the Black Hat security briefings in Las Vegas drove an electronic steamroller through password recovery systems on Amazon's EC2 and Microsoft's Online Office services come as no surprise, says Andy Cordial, Origin Storage's managing director.

"Password resetting and other security mechanisms in the cloud are always going to be a weak link, as long as user-friendliness comes ahead of security in the cloud computing beauty stakes," he said.

"Expecting regular joes to whip out a two-factor authentication device for use with a cloud-driven service just isn't realistic. It's not going to happen," he added.

 Completes strongest Q2 ever, expands Federal sales team

 REDWOOD SHORES CA. – July 30, 2009 – Imperva, the leader in Data Security, today announced a strong close to its second quarter 2009, increasing bookings in Q2 2009 nearly 30% over Q2 2008.  The company also expanded its executive team in Federal sales.

“The growth in our business signals that organizations recognize the need to implement a comprehensive approach that secures both data and applications,” said Imperva CEO Shlomo Kramer. “We are glad to see our vision validated in difficult economic times.”  Independent research firm, Forrester Research, Inc., in the report, “TechRadar™ For SRM Professionals: Application Security, Q3 2009”, noted, “Imperva provides a unique value proposition with a combination of web application firewalls and database monitoring technologies.”