Government

White House says new Chinese IT equipment rule may disrupt business without helping security

White House says new Chinese IT equipment rule may disrupt business without helping security By

Several U.S. trade groups also have objected to the provision, part of a recently passed appropriations bill, which bars certain federal agencies from buying IT tech gear produced by Chinese government-related companies.

"Right to Know" bill proposes more transparency for California data collectors

"Right to Know" bill proposes more transparency for California data collectors By

The state, no stranger to pioneering data security and privacy legislation, is at it again with a proposed measure that would force companies to be transparent about with whom they are sharing customer information.

China unhappy with new U.S. requirement that its IT gear must face review

By

The rule, part of a general appropriations bill signed by President Obama last week, comes following growing evidence of China's organized cyber espionage operations.

Cyber war, this is not

Cyber war, this is not

Espionage and fraud in cyber is not an armed conflict, says SystemExpert's Jonathan Gossels.

News briefs: Mandiant uncovers espionage, Evernote is breached, and more

News briefs: Mandiant uncovers espionage, Evernote is breached, and more

This month's news briefs includes recent news on Mandiant uncovering China's cyber espionage efforts, security firm Bit9's breach, and the Obama administrations latest efforts on combating the theft of trade secrets.

Debate: China is the top cyber threat to the United States

In this month's debate, two experts discuss whether or not China is the top cyber threat to the United States.

Federal judge to weigh in on FBI's "stingray" cell phone surveillance

By

In a matter of weeks, an Arizona federal judge is expected to decide whether the FBI illegally caught an accused fraudster.

IRS warns phishing attacks are among "dirty dozen" tax scams

IRS warns phishing attacks are among "dirty dozen" tax scams By

Phishing attacks were among the top 12 schemes hatched by tax season scammers.

New U.S. law says government agencies will need OK before buying Chinese IT equipment

By

According to the legislation, the review process will quell cyber espionage threats from China.

Draft of cyber bill exacerbates flaws of anti-hacking law

Draft of cyber bill exacerbates flaws of anti-hacking law By

The bill draft, which is in a preliminary stage, included harsher penalties for Computer Fraud and Abuse Act violations.

Lawmakers propose change to "outdated" email privacy law

By

Senators say current provisions of the Electronic Communications Privacy Act give law enforcement too many liberties when accessing the electronic communications of Americans.

DoD creating cyber "offensive" teams to strike back against foreign attackers

DoD creating cyber "offensive" teams to strike back against foreign attackers By

Cyber Command Chief Gen. Keith Alexander is now assembling 13 teams of IT experts for this purpose.

Bill C-30 falls owing to expense and privacy concerns

By

After intense opposition from the public, the Canadian government pledged to not introduce additional legislation to monitor online activity.

Critical infrastructure a weak point, says Canadian official

By

The Canadian government should to make it mandatory for utility companies and others to tighten security, a former official told a security conference.

China-telco partnership fears unwarranted, says Ontario official

By

The nascent partnership between a Chinese development group and an entrepreneurial hub funded by three levels of Canadian government has raised concerns from an outspoken former security adviser to Nortel Networks.

We're not in Kansas anymore!

For those of us who have been pursuing an effective public-private threat sharing mechanism, there's hope that maybe this time a program will be developed that effectively accomplishes this task.

MiniDuke espionage ring began earlier than first reports suggest

By

Attackers behind the MiniDuke spy campaign have targeted government entities and other organizations around the world since at least 2011.

Losing control: Critical infrastructure

Losing control: Critical infrastructure By

Industrial control systems remain troublingly vulnerable to both internal error and outside intruders, reports Danielle Walker.

Debate: The FTC should have the right to penalize companies for poor data security/privacy practices.

This month's featured debate informs whether the FTC should have the right to penalize companies for poor data security/privacy practices.

The influence of overseas reforms

By

The European Union is close to implementing an information protection law that will homogenize the responsibility of all of its 27 member states, which could have a ripple effect in the U.S.

Just get on with it already

By

Offering up more general guidelines to strengthen the country's critical infrastructure security - as in the president's recent executive order - is all well and good, but without any meaningful and enforceable requirements then, really, what's the point?

RSA 2013: Despite challenges, security has persevered

By

Microsoft's Scott Charney isn't ready to wave the white flag of surrender. In fact, he believes the security profession has done an admirable job, and there's reason to be confident that the future is bright.

FTC whips HTC over poor software coding, developer training and researcher outreach

By

The consumer protection agency said vulnerabilities and the "insecure implementation" of diagnostic software propelled action against the American division of the mobile device maker for a number of security shortfalls.

Malware once used exclusively for bank fraud is finding a new mission

By

Cyber criminals are repurposing data-stealing trojans, once used primarily to steal banking information, to collect intellectual property, which can be sold for a higher price tag, according to a McAfee study.

U.S. may rely on trade sanctions, fines to curb foreign cyber spy threat

U.S. may rely on trade sanctions, fines to curb foreign cyber spy threat By

The news comes after a detailed report emerged that U.S. firms were the target of Chinese government-backed espionage operations.

Following cyber order from Obama, CISPA is back

Following cyber order from Obama, CISPA is back By

Lawmakers have begun debate on the controversial threat information-sharing bill known as CISPA, which would complement the president's cyber security executive order. But it has a host of privacy objections to clear first.

Internal site hacked, Federal Reserve confirms

By

On Sunday, Anonymous said it hacked the Fed, before exposing the data of 4,000 bankers. Now, it appears the claims are true.

CRA gets flack for Netfile changes

By

The Canada Revenue Agency (CRA) has unnerved privacy experts with a change to its electronic tax-filing policy: It has removed several authentication requirements for electronic filers.

HRSDC loses 583,000 personal data of Canadians

By

Human Resources and Skills Development Canada (HRSDC), a department of the Government of Canada, was reeling last month after the personal data of 583,000 Canadians was lost on a portable hard drive.

Energy Department latest to be struck by skilled hackers

By

Several hundred employees and contractors at the U.S. Department of Energy were compromised in the breach, though reportedly no classified information was accessed by hackers.

Sign up for our newsletters

POLL