March, 2013:

• Federal judge to weigh in on FBI's "stingray" cell phone surveillance
• Web-based malware threats primary challenge for industry pros, survey says
• Anonymous takedown of Koch sites leads to indictment of Wisconsin man
• Buggy DIY botnet tool leaks in black market
• IRS warns phishing attacks are among "dirty dozen" tax scams
• Wells Fargo bank website hit by DDoS attack
• Video: Impacts of the executive order
• New U.S. law says government agencies will need OK before buying Chinese IT equipment
• Breach exposes data of 1k county workers, officials give no word on cause
• A new perspective: Compromised computing
• New study finds malware variants skirting AV, mostly delivered via web
• Alleged fight between anti-spam group and blacklisted company incites massive DDoS
• Research reveals 94 percent of endpoints currently running outdated versions of Java
• Phishing scammer gets five year sentence
• Report: Among simple, yet effective web app attacks, cloud environments hit hardest
• Why NAC? Why now?
• Video: Advanced attacks in today's threat landscape
• Laptop hosting patient data stolen from surgeon on vacation
• Draft of cyber bill exacerbates flaws of anti-hacking law
• Targeted Android attacks discovered by researchers
• The five-step privilege management checklist for financial organizations
• Spear phishes used to infect South Korean corporate networks
• New "watering hole" attack plants malware at news sites to spy on Chinese dissidents
• Laptop containing patient data goes missing from Mississippi hospital
• The perils of blocking BYOD
• Achieving compliance in today's ever-changing enterprise network
• VSkimmer trojan steals card data on point-of-sale systems
• Former student accused of stealing identities pleads guilty
• Members only: The Information Security Forum
• Apple releases two-factor authentication
• Report: 78% of IT security pros admit plugging in "found" USB drives
• Yontoo adware used to cash in on clicks targets Mac and Windows users
• Worry more about the cubicle dweller and less about the Chinese hacker
• Reuters social media editor disputes Anonymous conspiracy accusations
• South Korean corporations hit by widespread attack that wiped data and shut down systems
• Lawmakers propose change to "outdated" email privacy law
• IT security: Luxury or commodity in these uncertain times?
• Thirty-five percent of companies opt not to use encryption
• Florida voting "hack" shows how voting is susceptible to logic attacks
• APTs: The role of third-party apps
• Security Based on Trust, Not Fear
• Two men charged with hacking Subways to load up gift cards
• Here are eight cyber crooks who got less prison time than Andrew Auernheimer
• Malware places personal info of 25k at Massachusetts university at risk
• Experiment shows how often hackers want to attack critical infrastructure
• Hacker who wanted to embarrass AT&T sentenced to 41 months
• Welcome to the new and improved SCMagazine.com
• Popular ad blocking app nixed from Google Play
• Head of cyber security at DHS resigns
• Apple updates Mountain Lion OS, includes Java Web Start fix
• Legal fight between Cisco and Swiss firm continues with latest data theft accusations
• PCI compliance in the cloud decoded
• Reuters social media editor indicted for conspiring with Anonymous
• AT&T hacker to submit plea for lesser sentencing
• Card-skimming ring leader to serve up to 13.5 years in prison
• Unknown Targeted Attacks - Stopping malware at the endpoint
• The new normal - APTs
• Cyber criminals offer black market peers bug discovery service
• Faux pope dupes thousands of followers on Twitter
• DDoS attack strikes JPMorgan Chase website
• Celebrity data stolen from online credit report service
• DoD creating cyber "offensive" teams to strike back against foreign attackers
• Eight creative strategies to address the sophisticated adversary
• Retailer fights PCI fines for noncompliance after breach, sues Visa
• Study finds iOS apps to be riskier than Android
• Microsoft pushes seven patches, including fix for "evil maid"-style attack
• Hackers claim to expose info of first lady, including other officials and celebs
• Lost, unencrypted USB thumb drive impacts more than 50k Medicaid providers
• Video: Evolving threat tactics and the targets
• Sponsored video: Don Gray, chief security strategist, Solutionary
• China's foreign minister: Cyber space needs rules, not war
• Tripwire acquires nCircle to scale its risk management offerings
• Defining the qualities of cyber warfare
• FTC lodges new set of complaints against alleged cell phone spammers
• Hacktivists plan to resume DDoS campaign against U.S. banks
• Sponsored video: Philippe Courtot, chairman and CEO of Qualys, at RSA Conference 2013
• Nearly all apps vulnerable to exploit
• Sensitive data found in dumpster reveals SSNs and health info
• Microsoft schedules seven security patches for monthly Patch Tuesday
• Sponsored video: Tony Ball, senior vice president of identity and access management, HID Global
• Judge throws out lawsuit over LinkedIn password breach
• Sponsored video: John Summers, vice president of security business at Akamai Technologies
• Down go Chrome, Firefox, IE 10, Java, Win 8 at Pwn2Own hacker fest
• Sponsored video: Larry Ponemon, founder of the Ponemon Institute
• Sponsored video: Russ Dietz of Websense and Andy Oehler of F5
• Sponsored video: Andy Chou, co-founder and CTO, Coverity
• Attackers use stolen certificate to sign malicious Java applet
• The RSA Conference expo floor offended me - and why I blame the exhibitors
• Bill C-30 falls owing to expense and privacy concerns
• Critical infrastructure a weak point, says Canadian official
• China-telco partnership fears unwarranted, says Ontario official
• We're not in Kansas anymore!
• BYOD's next challenge? Mobile apps collect user data
• Small businesses in crosshairs of new malware-laden email ruse
• MiniDuke espionage ring began earlier than first reports suggest
• Guarding against a data breach
• 20/20 Webcast: Cyber crime targets
• Hotel tech trade association offers best practices for reducing payment card risk
• Oracle pushes patch for Java vulnerability after exploit reports surface
• Using new tactics, Asprox botnet goes unnoticed
• Evernote discloses password breach, while critics bemoan its use of crackable crypto
• Apple won't let users run Flash unless it is the latest version
• RSA 2013: iOS safer than Android due to open app model, patching delays
• Another Java exploit spreading
• RSA 2013: Manipulation, then password theft, is the modus operandi of advanced attackers
• Detecting the Enemy Within: Getting More out of DLP
• Unified threat managers (UTM)
• Emerging products: Virtual system security
• Threat of the month: Java zero-day
• Maximizing quality and reliability
• Book of the night
• CSO of the Year: John South, Heartland Payment Systems
• Preparing for the new norm: 2013 Guarding against a data breach survey
• Losing control: Critical infrastructure
• Before you take the plunge...
• New risks must be valued
• News briefs: NY Times and Twitter hacked, cyber security executive order, and more
• Debate: The FTC should have the right to penalize companies for poor data security/privacy practices.
• The influence of overseas reforms
• Company news: CipherCloud, Yahoo, and Twitter's company announcements
• Me and my job: Dominic Vogel IT security analyst
• Skills in demand: Penetration testers
• UTMs becoming universal
• Just get on with it already