23rd December,  2010 - Reports that the Web site of a New York-based tour firm has been hacked and around 110,000 bank card details lifted by hackers may have repercussions for the company on the PCI DSS front, says Imperva.

 According to Amichai Shulman, chief technology officer with the data security specialist, the hack itself occurred via a SQL Injection attack. In such an attack, the hacker gains illegal access to information in the database. As media reports have shown, the hacker launched the attack on September 26 over a 3 week period obtaining over 100K credit card details including the account number, expiration date, CVV2, and other personal identifying information such as home and email addresses.

Read more: CitySights card hack could generate PCI DSS fallout says Imperva

Rolling Meadows, IL, USA (15 December 2010)—Three leading global security organisations have launched the first information security principles designed to promote good practice in information security. The Information Security Forum (ISF), the International Information Systems Security Certification Consortium (ISC)2 and ISACA have developed 12 independent, non-proprietary principles that will help security practitioners respond more effectively in today’s complex, interconnected world. 

 The emerging role of information security in improved governance, regulatory compliance and risk assessment has prompted the need for clear, relevant guidelines. The principles will help individuals support business objectives, manage their organizational risk and promote responsible security behavior.

Read more: Leading groups launch first set of information security principles

 Bank of Cyprus UK announces it is working with Trusteer to launch an additional security service to its customers as of today Wednesday 8th December 2010.

 Available as a free download, Trusteer’s Rapport secure browsing service can be installed on a customer’s personal PC to lock down the browser and create a safe tunnel for communication between the customer and Bank of Cyprus UK, preventing fraud.

 

Bank of Cyprus UK supplies its customers with a Digipass® as part of its three pronged approach to security. Rapport is being introduced to complement this technology and provide extra confidence to those using its online banking facilities.

Read more: Bank of Cyprus UK secures its customers with Trusteer

 Rolling Meadows, IL, USA (7th December 2010)—With its potential to reduce expenses, drive automation and provide flexibility, virtualization has earned its way onto the board agenda and is being implemented by enterprises worldwide. But with the many benefits of virtualization come considerable risks. Global IT association ISACA provides a balanced look at virtualization—and strategies to help enterprises maximize the value—in a new white paper available for free download from www.isaca.org/virtualization.

According to the “Virtualization: Benefits and Challenges” white paper, virtualization risks can be divided into three groups:

·         Attacks on virtualization infrastructure—The two primary types are hyperjacking and virtual machine (VM) jumping. Hyperjacking is still a theoretical attack scenario, but has earned significant attention because of the major damage it can potentially cause.

Read more: New ISACA Guide Shares Strategies for Minimizing Virtualization Risks

 San Francisco, Calif. – December 6, 2010 – Imperva, the global leader in data security, announced today the appointment of industry veteran Terry Schmid as the company’s Chief Financial Officer. Schmid will be responsible for overseeing all finance, accounting, HR, IT, facilities and legal functions. The company also announced the addition of Scott Darling as the new Vice President, General Counsel and Corporate Secretary. As such, Darling is responsible for managing and directing all of Imperva’s legal matters.

 “We’re excited to have both Terry and Scott join the management team at Imperva,” said Imperva president and CEO Shlomo Kramer. “Their experience working with growing technology companies as well as large enterprise will be an asset to Imperva as we continue to expand our global footprint and increase our marketshare.”

Read more: Imperva Expands Executive Team with New Chief Financial Officer