Access control and authentication - News, Features, and Slideshows

Two-factor authentication is often held up as a best practice for security in the online world, but Dropbox on Wednesday announced a new feature that's designed to make it even tougher.

Oracle's CSO thinks customers who reverse-engineer its code in attempts to find bugs should cut it out because they're not finding much worth acting on and, more importantly, they're violating their licensing agreements.

An attack using the SMB file sharing protocol that has been believed to work only within local area networks for over a decade can also be executed over the Internet, two researchers showed at the Black Hat security conference.

File synchronization services, used to accommodate roaming employees inside organizations, can also be a weak point that attackers could exploit to remain undetected inside compromised networks.

RFID card access systems are used by most companies to let people into their buildings. But over the last few years, researchers have shown how these systems can be easily bypassed.

<em>Bill Weinberg, Senior Director, Open Source Strategy,</em> <a href="http://www.blackducksoftware.com">Black Duck Software</a>

Apple's App Store, Google's Play store and other app stores are packed with apps that can compromise your security and privacy without you ever knowing anything bad happened. What's a mobile app user to do?

Developers being overly trusting is one of them.

Securing a hybrid cloud is not the same thing as deploying hybrid security products.

Security pros and government officials warn of a possible cyber 9/11 involving banks, utilities, other companies, or the Internet

An assessment of the information security department shows that it has a lot of growing up to do yet.