SeekSecurity

It’s no secret that my presidential campaign harnessed the Internet and technology to transform our politics. What isn’t widely known is that during the general election hackers managed to penetrate our computer systems.

RBS WorldPay said Wednesday it is back on Visa Inc.'s list of service providers that are validated as compliant with the PCI Data Security Standard.

An analysis of the traffic patterns coming out of the Data Communication Company of Iran (DCI), Iran's state-run Internet provider, shows that the country has severely curtailed SSH, Flash and Bittorrent communications, a security researcher stated on Thursday.

Internal networks are notoriously insecure so why wouldn’t you encrypt PCI data end to end? What makes an Internal Network somehow so inherently secure that encryption is not needed?

Verizon Business investigated 90 major data breaches in 2008, including 285 million compromised records. Nearly ¾ of those breaches were external hacks, and 99.9 percent of the records were compromised via servers and applications.

A new style of Australian passport has been released, incorporating iconic images with the latest security technology.
Launched today, the new travel document uses images by Australian artists of the country's unique landscape, flora and fauna, and lifestyle.

BM has purchased Ounce Labs, a privately held software security provider, the companies said Tuesday.
Ounce Labs uses its technology to scan the source code of an application, hunting for security holes and compliance failures. Ounce tries to track down problems early on in a product's development when they're easier and cheaper to fix.

Two researchers have independently uncovered flaws in the way domain names are verified on the internet, which could allow attackers to impersonate a site and steal information from unsuspecting surfers.

Damn Vulnerable Web App (DVWA) is a web application that is damn
vulnerable. Its main goals are to be light weight, easy to use and
full of vulnerabilities to exploit. It has been developed for the use of information security professionals and students to test out their skillz and/or toolz in a legal environment.