Home

SecurEnvoy, Sophos Partner to deliver world's first Tokenless Two Factor Authentication for Disk Encryption

SecurAccess provides strong 2FA for Sophos full disk encryption eliminating the need for expensive physical tokens or smartcard readers

Berkshire (UK): SecurEnvoy, the inventor of tokenless authentication, is Sophos’ first technical partner to offer a tokenless two-factor authentication solution for laptops and other devices encrypted using Sophos SafeGuard Enterprise. This removes the need for hardware tokens or smartcards and readers – making it more cost-effective for companies and easier for users to work securely, wherever they are using SMS messages to the user’s mobile phone.

: CATHERINE EYRES; InfoSecurity; Posted On Tuesday, 09 October 2012 10:23

Tatanga Attack Exposes chipTAN Weaknesses

Below is a media alert from Trusteer’s CTO on a new Tatanga attack against chipTAN systems used by banks in Germany to generate unique transaction authentication numbers (TAN).

Tatanga checks the user account details including the number of accounts, supported currency, balance/limit details. It then chooses the account from which it could steal the highest amount and initiates the transfer.

Trusteer has discovered a new Tatanga attack against chipTAN systems used by banks in Germany to generate unique transaction authentication numbers (TAN). chipTAN requires that the bank card for the account be inserted in the device to generate a TAN that is specific to the current transaction.

: AMIT KLEIN, CTO, TRUSTEER; InfoSecurity; Posted On Tuesday, 09 October 2012 10:14

Varonis reduces costs and takes pain out of data governance

Varonis unveils new, flexible architecture designed to boost efficiency, reduce overheads and simplify management

London: Varonis Systems Inc. has released version 5.8 of Varonis DatAdvantage, offering even more flexible, easier to manage and cost effective data governance for unstructured and semi-structured data while reducing system and network overhead. The latest enhancements are the result of continued improvements to the software to help organizations even more effectively audit and manage data access control, identify and classify data owners, and oversee entitlement and authorization processes for their sensitive data.

: REGINE HARTMANN; InfoSecurity; Posted On Tuesday, 09 October 2012 10:07

New ISACA Guide facilitates secure migration to the Cloud

Transborder legal requirements and disaster recovery plans among key considerations

London, UK: Cloud computing continues to have a significant impact on the way enterprises operate, and companies are increasingly migrating to the cloud as a result of its value. But security and data privacy concerns are critical issues to consider before adopting cloud-computing services. Security Considerations for Cloud Computing, a new book from global nonprofit IT association ISACA, presents practical guidance for IT and business professionals to help them securely move to the cloud.