ChoicePoint will pay $10 million to settle a class-action lawsuit filed after the data aggregator and credentialing service admitted to a major data breach in 2005.
More than three-quarters of large U.S. merchants, and nearly two-thirds of medium-sized retailers, are in compliance with the Payment Card Industry Data Security Standard (PCI DSS), according to Visa.
China appears to have won the first battle in a global cyberwar, gaining access to key U.S. databases through aggressive, non-stop phishing assaults. The U.S. response must include monitoring of all email traffic to critical government and private-sector networks, experts say.
The Federal Energy Regulatory Commission (FERC) today approved eight mandatory cybersecurity standards that extend to all entities connected to the nation's power grid.
A vendor working with the U.S. Department of Homeland Security (DHS) has uncovered vulnerabilities impacting 11 major open-source software projects, including the Perl and PHP programming and scripting languages used widely to develop web applications.
Script-based attacks that cycle through multiple exploits and target trusted websites, increasingly sophisticated botnets, and cyberespionage that uses phishing to steal terabytes of data head SANS Institute's Top 10 list of 2008 security menaces.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.