Security Strategy, Plan, Budget

A disgruntled IT contractor pleaded guilty this week to federal charges that he disrupted a computer system used to alert on oil leaks.

The Cybersecurity Research and Development Amendments Act of 2009 would require federal agencies to develop cybersecurity research-and-development plans, as well as authorize grant funding and establish a scholarship program.

Merchants, desiring an easier path to PCI compliance, may soon be encouraged to consider a number of nascent technologies that can help protect cardholder data.

The advertisements seem to be delivered by multiple third-party ad networks including Google's DoubleClick.

Sixty percent of IT security professionals polled in a recent study said their organization does not have sufficient resources to become PCI compliant.

An ongoing attack on Google users is sending victims to rogue AV software sites, according to researchers at eSoft's Threat Prevention Team.

Privacy advocates are questioning a provision of the new health care breach notification rule, which states that organizations only need to alert victims if they believe disclosure of the information "poses some harm."