EU: USB flash drives 'pose real security threat' ENISA

USB flash drives 'pose real security threat'USB flash drives are being used to breach enterprise network security and install malicious code on corporate IT systems, a technology body has claimed. According to the European Network and Information Security Agency (ENISA), organisations allowing the unfettered use of such devices could be losing between 65,000 euros (£51,000) and 1.6 million euros (£1.3 million) for every security violation that is made. The agency, which shares best practices for minimising the risk of uncontrolled use of personal storage devices, also warned that as many as 90 per cent of the USB drives purchased by businesses last year were not encrypted or stored in secure locations. Andrea Pirotti, executive director of the ENISA, said: "The cost of a USB flash drive may be insignificant but the value of the data it might contain can be priceless. ENISA strongly encourages companies with highly regulated or sensitive data to better manage the use of 'plug-and-play' devices."

EU states extend life of Internet security body | Technology | Reuters

EU states extend life of Internet security body Technology Reuters: "LUXEMBOURG (Reuters) - European Union telecoms ministers agreed on Thursday to extend the life of the bloc's Internet security watchdog by three years as threats to the Web increase.
The European Network and Information Security Agency (ENISA), a small body set up in 2004, was due to be closed down next year. But rising cyber-crime and attacks such as one suffered by EU member Estonia last year has triggered a rethink.
The bloc's 27 telecoms industry ministers, meeting in Luxembourg, agreed a three-year reprieve until 2012 to give time to decide how to take Greek-based ENISA forward.
The European Parliament is set to formally endorse the move next week.
ENISA's executive director, Andrea Pirotti, said network security was crucial for the European economy, which increasingly depends on a trouble-free Internet.
'The need for secure networks, systems and services will certainly not suddenly disappear in 2012,' Pirotti said in a statement.
'Network and information security touches business and the daily lives of citizens in Europe. It consequently needs constant reinforcement to keep up with the evolving threats landscape,' Pirotti said.
With an annual budget of 8 million euros and fewer than 50 staff, ENISA had no remit or resources to deal with cyber attacks like that experienced by Estonia last year, when the Baltic state accused Russia of causing government websites to crash."

Cyber Terrorism Threat Growing, EU Agency Says

The threat of cyber terrorism is growing, the European Network and Information Security Agency has warned. ENISA urged more European Union investments in security to avoid a "digital 9/11." Andrea Pirotti, executive director of ENISA, urged the EU to require reporting on security breaches and more cooperation among member states.

The European Union has a long way to go in safeguarding Internet businesses, according to the European Network and Information Security Agency. ENISA cited the possibility of a "digital 9/11."