Security News February 25

Investors value a company’s cyber security record

http://www.darkreading.com/threat-intelligence/167901121/security/attacks-breaches/240149279/investors-value-a-company-s-cybersecurity-record

U.S. investors are wary of investing in companies that have a history of getting hacked, and they are twice as concerned about those whose customer data was stolen than those whose intellectual property was pilfered

Java’s latest security problem: new flaw identified, old one attacked

http://arstechnica.com/security/2013/02/javas-latest-security-problems-new-flaw-identified-old-one-attacked/

New vulnerability completely bypasses the security sandbox in the most recent Java code

HTC settlement could alter mobile security and privacy landscape

http://threatpost.com/en_us/blogs/htc-settlement-could-alter-mobile-security-and-privacy-landscape-022513

Loved this quote: “It’s not like they are going to develop security religion overnight”

Another iPhone bypass vulnerability discovered

http://threatpost.com/en_us/blogs/another-iphone-passcode-bypass-vulnerability-discovered-022513

Another week, another iPhone bypass vulnerability

Seven actions for state Governors on cyber security

http://www.govtech.com/blogs/lohrmann-on-cybersecurity/Seven-Actions-for-Governors-022413.html

Basic recommendations; but in light of recent breaches maybe appropriate

Security understaffing worries CISOs

http://www.informationweek.com/security/application-security/it-security-understaffing-worries-cisos/240149321?token=e3285b36f0f5dbd385080f89092521f1

28% of respondents said they could remediate the damage from a targeted attack within a day; is this too optimisitic?

14 dirty tricks, IT security pros edition

http://www.networkworld.com/news/2013/022513-14-dirty-it-tricks-security-267042.html?fsrc=netflash-rss&utm_source=dlvr.it&utm_medium=twitter

Security ‘consultant’ dirty tricks

Sony's New PlayStation 4 and Your Privacy

http://www.forbes.com/sites/larrymagid/2013/02/25/sonys-new-playstation-4-and-your-privacy/

Because we all know Sony has a great track record with securing private data…

Don't Blame China For Security Hacks, Blame Yourself

http://www.informationweek.com/security/vulnerabilities/dont-blame-china-for-security-hacks-blam/240149309

“The Chinese are like the Kardashians… [when] you mention China in an attack, and every radio or news station picks it up."