Stories by Thor Olavsrud

CISOs Must Engage the Board About Information Security

Your organization will come under attack. It's not a matter of "if." It's a matter of "when." And security is no longer simply an operational concern. As technology has become the central component of nearly all business processes, security has become a business concern. As a result, information security should sit firmly on the boardroom agenda.

Signature-based endpoint security on its way out: McAfee

"We are seeing about 150,000 new pieces of malware every day now," says Simon Hunt, vice president and CTO of Endpoint Solutions at security vendor McAfee. "The attack is just impossible and we're purely on the defensive. Before we know about any new virus, somebody has to be a sacrificial lamb and die and tell us about it. It's an awful way of doing things."

PayPal says it's time to ditch passwords and PINs

PayPal CISO Michael Barrett took the keynote stage at Interop to announce the impending death of passwords and their replacement with more robust authentication protocols based on an open standard. Apple may lead the way with its next iPhone.

AP Twitter Hijacking Proves Need for Better Authentication, Encryption

The Associated Press's Twitter account was hijacked this afternoon and used to tweet a false message that reported two explosions at the White House had left U.S. President Barack Obama injured. One security expert says the incident underscores the need to adopt out-of-band two-factor authentication and keystroke encryption.

4 Mobile Security Predictions to Help CIOs Plan for the Future

Few things can keep CIOs up at night these days like mobility, particularly bring your own device (BYOD). After all, mobile, consumerization of IT and bring-your-own-device (BYOD) are turning enterprise security models on their heads. Privacy implications--let alone the potential for data loss and data leakage--are enough to make a CIO break out in a cold sweat.

HP looks to Moonshot for datacentre of the future

It's no secret that Hewlett-Packard (HP) has been seeking a path to a turnaround. On Monday morning, HP President and CEO Meg Whitman unveiled a new vision for the company's server business that could be what the company's flagging fortunes need.

Aggressive Mobility Plans Bring Risks, But the Rewards Are High

Mobility is a top-of-mind concern for a majority of IT departments today. Companies that are proactively embracing mobility to transform their businesses are incurring much greater costs associated with mobility incidents, but they are also reaping significant rewards, according to a new study by Symantec.

Digital certificates chaos could cost companies US$398 million

Trust. It is the basis of all digital transactions. We trust that our inventory systems are providing the correct information, that the documents we're reading have not been altered, that the entity on the other side of a financial transaction is our bank.

Certificate Authorities Form Group to Educate on SSL Best Practices

Responding to the increasing number of threats aimed at certificate authorities and the ecosystem of trusted online transactions they represent, seven certificate authorities have come together to form an advocacy group to advance security standards and promote best practices.

FIDO Alliance Says, 'Forget Passwords!'

If there's one thing that's become clear in the past several years, according to PayPal CISO Michael Barrett, it's that usernames and passwords--originally conceived in the era of centralized mainframes--have become more of a liability than a protection online.

Is Stolen IP Walking in the Door With New Employees?

Are your former employees walking out the door with your intellectual property? And worse, is your new hire putting your organization at risk by bringing in IP stolen from a former employer? A new global survey by Symantec and The Ponemon Institute finds that half of employees who left or lost their jobs in the past 12 months kept confidential corporate data, and 40 percent say they plan to use the data in their new jobs.

[]