Feeds

Sony calls in data Sherlocks to unpick megahack disaster

Plus Inspector Lestrade of the FBI

Beginner's guide to SSL certificates

Sony has drafted in security experts to figure out who hacked into its systems - and how they did it - before stealing personal data on 100 million consumers of the company's services.

Both the firm's PlayStation Network and Online Entertainment service remain suspended in the aftermath of high-profile hack attacks that have turned Sony into a poster child for data insecurity. Sony has added extra security controls before beginning the phased restoration of both services, which it expects to complete by the end of the month.

In the meantime, it has hired computer forensics experts from Guidance Software and Data Forté (among others) to figure out what went wrong, the BBC reports. The FBI and Oracle are also looking into the breach, which affected 77 million PlayStation Network gamers and 25 million users of its Online Entertainment services. Sony admits that unidentified intruders may have made off with credit cards details of PlayStation Network gamers but is seeking to reassure its customers that the card data was encrypted.

The breach also exposed names, email addresses, dates of birth and phone numbers – all stored in plain text – as well as hashed copies of login credentials. Users have been notified about the security lapse. The chances of credit card fraud against registered accounts diminishes by the day but concerns remain that the depth of information available might facilitate future ID theft fraud, which typically involves establishing lines of credit under assumed names. ®

Internet Security Threat Report 2014

Whitepapers

10 ways wire data helps conquer IT complexity
IT teams can automatically detect problems across the IT environment, spot data theft, select unique pieces of transaction payloads to send to a data source, and more.
The total economic impact of Druva inSync
Examining the ROI enterprises may realize by implementing inSync, as they look to improve backup and recovery of endpoint data in a cost-effective manner.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security and trust: The backbone of doing business over the internet
Explores the current state of website security and the contributions Symantec is making to help organizations protect critical data and build trust with customers.