A new survey found that the third of UK businesses fail to report security crimes and breaches

According to a new survey by Infosecurity Europe 2007, which involved about 285 large organizations in UK, almost the third of these businesses don't report information security crimes and breaches. The survey discovered also that IT managers are faced with a very difficult choice in whether or not to report any security crime.

Managers have to weigh between their responsibility to report security crimes in order to prevent similar incidents in the future and the effects of reporting these incidents on their reputation amoing their customers and hackers.

Nevertheless according to Jonathan Coad the media lawyer from Swan Turton "From my experience as a media lawyer, reporting crime to the police is a double edged sword as invariably the press have found out about the incident within 24 hours of reporting it to the police, creating a real PR risk."

However Phillip Virgo, the Secretary General of think tank Eurim stated that "The time has come to respond to the needs of the customer for security tools they can understand, realistic advice, guidance and support on how to use them and for reporting systems that will route their enquiry to some-one who will respond - be it law enforcement or technical support,"

Source of the news

More than half of the security experts at a conference for security experts have insecure WiFi settings

According to AirDefense the majority of the computers used by security experts who were at the RSA conference in San Francisco in February this year didn’t have the appropriate security protection.

The wireless traffic was scanned by AirDefense on the first day of the conference and found a total of 623 Wi-Fi enabled notebooks and mobile phones. 56% of those devices were configured automatically to log-on to networks with default names such as 'Linksys' or 'T-Mobile'.

Furthermore and according to vnunet.com “attackers could exploit the feature through a so-called man-in-the-middle attack in which a rogue access point is set up with a Service Set Identifier that is identical to the common service.”


Read the full story