CSO | Security news, features and analysis about prevention, protection and business innovation.

Citrix races out more patches to fix critical bug, plus a free detection tool

The detection tool however won’t detect all compromises.

Liam Tung

medical network h/ ealthcare IoT / hospital connections and communications

Insecure configurations expose GE Healthcare devices to attacks

The six high-risk vulnerabilities result from hard-coded or no credentials in remote access software and the use of outdated applications.

Lucian Constantin

Tour de France cyclists racing / global digital broadcast connections

How the Tour de France secures its broadcast from disruption

Few sporting events have the scale and logistics challenges that the Tour de France presents. Event organizer ASO uses the cloud and tight physical security to avoid cyberattacks and broadcast integrity.

Dan Swinhoe

What is cryptojacking? How to prevent, detect, and recover from it

Criminals are using ransomware-like tactics and poisoned websites to get your employees’ computers to mine cryptocurrencies. Here’s what you can do to stop it.

Michael Nadeau

Safeguarding essential infrastructure from attacks in a digitised world: why Australian utilities need to put cyber-security on the agenda in 2020

The extraordinary life of operational infrastructure in utilities means that many devices that were never designed to be accessible from an IP network are now vulnerable to external attacks And even new systems like the Siemens...

Jim Cook, ANZ Regional Director at Attivo Networks

Microsoft accidentally exposed 250 million customer support records online

Even Microsoft isn’t immune to security blunders due to misconfigured databases. Microsoft today revealed it had briefly exposed its internal customer support database on the web, potentially giving anyone access to over 250...

Liam Tung

Microsoft Windows 7 security patches/updates

How to implement Windows 7, Server 2008 security updates after end-of-life

Microsoft has ended support for Windows 7 and Windows Server 2008, but you can purchase extended security updates. Here's what you need to do to implement them.

Susan Bradley

Overflow > Pouring more binary water into a glass than it can hold causing overflow.

What is a buffer overflow? And how hackers exploit these vulnerabilities

A buffer overflow or overrun is a memory safety issue where a program does not properly check the boundaries of an allocated fixed-length memory buffer and writes more data than it can hold. This causes data to overflow to adjacent...

Lucian Constantin

CSO Executive Sessions

Episode 1: Tracking privacy from a risk standpoint

Podcast Episode 1: Listen now as Ken Foster, head of global cyber risk governance at First Data, discusses how privacy now carries with it a risk weight that has to be part of every conversation around policies and standards. But...

Bob Bragdon

New Google Chromebooks to get 8 years of security and feature updates

As Microsoft kills off free Windows 7 support, Google has announced that all new Chrome OS-based Chromebooks from 2020 and beyond will get eight years of security and feature updates. Google announced the increased support...

Liam Tung

Popular Resources

View All

White Paper

Smarter, Faster Experiences for Your Entire Workforce
White Paper

Smarter, Faster Experiences for Your Entire Workforce
eBook
Sponsored

The making of the modern workplace
eBook
Sponsored

The Secrets of High-Performing Teams… Wherever They’re Located

Brexit / GDPR > Cutting connections / United Kingdom / European Union / global security shield

What the Brexit Withdrawal Agreement Bill means for data protection and the GDPR

Boris Johnson's Withdrawal Agreement Bill (WAB) largely leaves existing data protection regulation in place, but changes are still possible.

Dan Swinhoe

3 patch training update software band aid laptop with virus binary

Citrix issues ADC patch amid new attacks, pushes forward more patches

US enterprise virtualization firm Citrix has shipped patches for a critical vulnerability that is being actively exploited and accelerated additional patches for other affected products. The first round of patches arrives amid...

Liam Tung

Welcome to Insider Pro

For more than 50 years, IDG has earned the trust of its readers with authoritative coverage of the technology industry. Insider Pro is the natural evolution of the insightful coverage our publications have produced for decades.

Dan Muse

Multiple individual cloud instances / cloud deployments

How Adobe monitors cloud deployments to control shadow IT

Keeping an eye on your cloud deployments is key to preventing yet another data breach. Adobe's MAVLink program does just that.

J.M. Porup

Data on the rise: 4 new challenges security must master

Data is information security's bread and butter, but the rise of data brings both new challenges and new opportunities. To meet them, security needs to change its relationship with data.

Drew Osborne

From Our Advertisers

cso online

Infrastructure cyberattacks pose a clear and present danger in 2020 and beyond: WEF

Increasing cyber threats will force organisations to embrace cloud security in 2020

Microsoft’s offers Application Inspector to probe untrusted open source code

Citrix races out more patches to fix critical bug, plus a free detection tool

The detection tool however won’t detect all compromises.

Insecure configurations expose GE Healthcare devices to attacks

The six high-risk vulnerabilities result from hard-coded or no credentials in remote access software and the use of outdated applications.

How the Tour de France secures its broadcast from disruption

Few sporting events have the scale and logistics challenges that the Tour de France presents. Event organizer ASO uses the cloud and tight physical security to avoid cyberattacks and broadcast integrity.

What is cryptojacking? How to prevent, detect, and recover from it

Criminals are using ransomware-like tactics and poisoned websites to get your employees’ computers to mine cryptocurrencies. Here’s what you can do to stop it.

Safeguarding essential infrastructure from attacks in a digitised world: why Australian utilities need to put cyber-security on the agenda in 2020

The extraordinary life of operational infrastructure in utilities means that many devices that were never designed to be accessible from an IP network are now vulnerable to external attacks And even new systems like the Siemens...

Microsoft accidentally exposed 250 million customer support records online

Even Microsoft isn’t immune to security blunders due to misconfigured databases. Microsoft today revealed it had briefly exposed its internal customer support database on the web, potentially giving anyone access to over 250...

How to implement Windows 7, Server 2008 security updates after end-of-life

Microsoft has ended support for Windows 7 and Windows Server 2008, but you can purchase extended security updates. Here's what you need to do to implement them.

What is a buffer overflow? And how hackers exploit these vulnerabilities

A buffer overflow or overrun is a memory safety issue where a program does not properly check the boundaries of an allocated fixed-length memory buffer and writes more data than it can hold. This causes data to overflow to adjacent...

Episode 1: Tracking privacy from a risk standpoint

Podcast Episode 1: Listen now as Ken Foster, head of global cyber risk governance at First Data, discusses how privacy now carries with it a risk weight that has to be part of every conversation around policies and standards. But...

New Google Chromebooks to get 8 years of security and feature updates

As Microsoft kills off free Windows 7 support, Google has announced that all new Chrome OS-based Chromebooks from 2020 and beyond will get eight years of security and feature updates. Google announced the increased support...

What the Brexit Withdrawal Agreement Bill means for data protection and the GDPR

Boris Johnson's Withdrawal Agreement Bill (WAB) largely leaves existing data protection regulation in place, but changes are still possible.

Citrix issues ADC patch amid new attacks, pushes forward more patches

US enterprise virtualization firm Citrix has shipped patches for a critical vulnerability that is being actively exploited and accelerated additional patches for other affected products. The first round of patches arrives amid...

Welcome to Insider Pro

For more than 50 years, IDG has earned the trust of its readers with authoritative coverage of the technology industry. Insider Pro is the natural evolution of the insightful coverage our publications have produced for decades.

How Adobe monitors cloud deployments to control shadow IT

Keeping an eye on your cloud deployments is key to preventing yet another data breach. Adobe's MAVLink program does just that.

Data on the rise: 4 new challenges security must master

Data is information security's bread and butter, but the rise of data brings both new challenges and new opportunities. To meet them, security needs to change its relationship with data.