The September 26, 2011 edition of the Wall Street Journal contained a special section dedicated to information security.  In an article entitled What's a Company's Biggest Security Risk? You., reporter Geoffrey A. Fowler details the security gaps that are created by people.  Fowler writes: We are the weakest link. Hacking attacks against companies are growing bigger and bolder—witness a string of high-profile breaches this year at Sony Corp., Citigroup Inc. and others. But gone are the days when hackers would simply find holes in corporate networks to steal valuable data. Large companies have grown wise to the threat of hacking, and [...]

ICONIX, Inc., the industry leader in visual email solutions, announced today that it has added fraud filtering capability to SP GuardTM, its spear-phishing defense product. Now, in addition to highlighting legitimate messages with an icon in the inbox, enterprises will be able to block fraudulent messages pretending to be from their organization or their trusted partners.   Recent security breaches at many major enterprises have been widely reported in the press. Cisco's June 2011 study, "Email Attacks: This Time It's Personal", reported that suspicious emails with suspicious links are being replaced by highly targeted emails that do not rely on [...]

In two companion articles appearing in tomorrow's edition (9/24/11) of The Sydney Morning Herald, reporter Dylan Welch describes international cyber spying.  The first article, Code red: the cyber spy threat, discusses the wide-ranging problem of cyber espionage.  The article describes a large number of cyber attacks against many governments and international organizations.  Of course, spearphishing plays a prominent role in the story.   These are just two of the incidents reported: On June 1, 2009, messages with the heading ''China and Climate Change'' dropped into the email inboxes of five US State Department officers. The five officers, working in the [...]

PC World is reporting that the malware which was used in the spearphishing attack that compromised the RSA security token  may have been used to attack US defense organizations. PC World quotes Bernardo Quintero, the founder of malware analysis site VirusTotal.  "According to our data, RSA was just one of the targets. [Attackers] used the same malware to try to penetrate other networks."  The report continues: VirusTotal is a popular site with security professionals who use it to get a quick industry consensus take on suspicious files. It runs any file through a battery of antivirus scanning engines and spits out [...]